AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop

By Microsoft · Browse Mode
About the Exam

This exam is for server or desktop administrators who design, implement, manage, and maintain Azure Virtual Desktop experiences and remote apps. It covers planning and implementing Azure Virtual Desktop infrastructure, identity and security, user environments and apps, and monitoring and maintaining the environment. Passing demonstrates practical expertise with Azure Virtual Desktop administration and operations.

Exam Topics

  • Plan and implement an Azure Virtual Desktop infrastructure40–45%
  • Plan and implement identity and security15–20%
  • Plan and implement user environments and apps20–25%
  • Monitor and maintain an Azure Virtual Desktop infrastructure10–15%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF
Learn More

Last updated August 3, 2026 at 8:52 AM

Topic filter
Retired questions
Question sort
Questions per page

QuestionQ1

Plan and implement an Azure Virtual Desktop infrastructure

You have an on-premises Hyper-V host named Server1 and an Azure subscription. You plan to deploy Azure Virtual Desktop by using a custom image.

On Server1, you create a virtual machine named CustomImage with these settings:

  • Generation: 2
  • Virtual disk name: ImageC.vhdx
  • Virtual disk type: Dynamically expanding

You build the custom image and generalize its operating system.

You need to prepare the virtual disk so that you can deploy new hosts by using the custom image.

What should you do?

Select
Convert the virtual disk to:
Store the virtual disk by using:
Explanation

Azure requires an uploaded operating-system disk to be a fixed-size VHD; dynamically expanding disks and VHDX files must be converted before upload. Upload the resulting VHD as a page blob in Azure Blob Storage, from which it can be used to create an Azure image for session-host deployment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Plan and implement an Azure Virtual Desktop infrastructure

You have an Azure Virtual Desktop host pool in the East US region.

You need to implement a disaster recovery solution that meets these requirements:

  • If users cannot connect to the Azure Virtual Desktop resources in the East US region, they must be able to connect to equivalent resources in the West US region.
  • Users must connect to the Azure Virtual Desktop resources in either East US or West US by selecting a single icon in the Remote Desktop client.
  • During a disaster, an administrator must initiate failover between the Azure regions manually.
  • Failover times must be minimized.

What should you do?

Explanation

Azure Virtual Desktop can register session-host VMs deployed in a different Azure region with one host pool. Keeping already provisioned West US session hosts in the existing pool retains one published resource for users and allows an administrator to manually direct capacity to the surviving regional hosts, with no wait for VM replication or deployment. A single cross-region host pool is specifically supported for scenarios where duplicate resource definitions and assignments should be avoided.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Plan and implement identity and security

You have an Azure Virtual Desktop deployment and two Azure Active Directory groups named Group1 and Group2.

You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1, and Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.

You must meet these requirements:

  • Users in Group1 must be prompted for multi-factor authentication (MFA) when connecting to Azure Virtual Desktop.
  • Users in Group2 must reauthenticate every eight hours while connected to Azure Virtual Desktop.

Which settings should you configure in Policy1 and Policy2?

Select
Policy1:
Policy2:
Explanation

A Conditional Access Grant control can require multifactor authentication. The Session control provides Sign-in frequency, which can be configured for periodic reauthentication after eight hours. Sign-in risk and user risk are policy conditions rather than the controls that enforce these requirements.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Plan and implement an Azure Virtual Desktop infrastructure

You have an Azure Virtual Desktop pooled host pool named HostPool1.

You need to dynamically allocate resources to HostPool1 according to the number of sessions on each host.

What should you create?

Explanation

An Azure Virtual Desktop scaling plan configures Autoscale for a pooled host pool. It uses host-pool capacity thresholds and session limits to scale session-host resources in response to usage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Plan and implement identity and security

You have a hybrid Azure Active Directory (Azure AD) tenant.

You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines running Windows 10 Enterprise. The virtual machines will join the on-premises Active Directory domain and be used by members of a domain group named Department1.

You need to ensure that each user is automatically added to the local Administrators group on the virtual machine to which the user signs in.

What should you configure?

Explanation

A Group Policy Object can use the Local Users and Groups preference extension to manage membership of the local Administrators group on the Active Directory domain-joined session hosts. Adding the Department1 domain group through that preference grants its members local administrator membership on the applicable virtual machines.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home