[Jul 01, 2026] Fully Updated Free Actual Microsoft AZ-140 Exam Questions
Free AZ-140 Questions for Microsoft AZ-140 Exam [Jul-2026]
The AZ-140 exam covers a wide range of topics related to Azure Virtual Desktop, including deployment and management of host pools, managing user access, configuring security, and optimizing the virtual desktop environment. Candidates must demonstrate their ability to configure and manage Azure Virtual Desktop infrastructure, including creating and configuring host pools and session hosts, managing user profiles, and configuring virtual machine images.
To prepare for AZ-140 exam, candidates can take advantage of a variety of resources, including online training courses, practice exams, and study guides. Microsoft offers official training courses that cover all the topics in the exam, as well as a certification path that includes the AZ-140 exam. Candidates can also find a wealth of information and resources online, including blogs, forums, and online communities.
Microsoft AZ-140 exam is intended for IT professionals who are responsible for configuring and managing Azure Virtual Desktop environments. AZ-140 exam is designed to test a candidate's knowledge and skills in deploying, configuring, and managing Azure Virtual Desktop, as well as securing and optimizing the environment. AZ-140 exam is suitable for IT professionals who have experience in Azure and desktop virtualization technologies.
NEW QUESTION # 62
You have an Azure Virtual Desktop deployment that uses Azure Active Directory Domain Services (Azure AD DS). You have the following host pool:
* Name: Pool1
* Type: Personal
* Number of session hosts: 5
You plan to deploy two new session hosts to Pool1. What should you do before you deploy the session hosts?
- A. Increase the maximum session limit.
- B. Create a registration key.
- C. Create a scaling plan.
- D. Precreate a computer account in Azure AD DS.
Answer: D
Explanation:
This is done by using the Add-AzDomainComputer cmdlet in PowerShell. After the computer accounts have been created, the new session hosts can be deployed. For more information, please refer to the following Microsoft documentation: https://docs.microsoft.com/en-us/azure/virtual-desktop/create-session-host- pools#precreate-computer-accounts-in-azure-ad-ds.
NEW QUESTION # 63
You have an Azure subscription that contains the virtual machines shown in the following table.
You create a shared image gallery as shown in the SharedGallery1 exhibit. (Click the SharedGallery1 tab.)
You create an image definition as shown in the Image1 exhibit. (Click the Image1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://www.robinhobo.com/windows-virtual-desktop-wvd-image-management-how-to-manage-and-deploy-custom-images-including-versioning-with-the-azure-shared-image-gallery-sig/
NEW QUESTION # 64
You have an Azure subscription that contains the virtual machines shown in the following table.
You create an Azure Compute Gallery as shown in the Azure compute gallery exhibit. (Click the Azure compute gallery tab.)
You create a virtual machine image definition as shown in the VM image definition exhibit. (Click the VM image definition tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
Explanation
Text Description automatically generated with medium confidence
NEW QUESTION # 65
You have an Azure Virtual Desktop deployment.
You plan to use just-in-time (JIT) VM access to manage session host virtual machines.
You need to recommend license requirements for JIT VM access. Your solution must minimize costs.
Which license should you recommend?
- A. Microsoft 365 E5
- B. Microsoft Defender for Servers Plan 2
- C. Enterprise Mobility + Security E5
- D. Microsoft Defender for Servers Plan 1
Answer: D
NEW QUESTION # 66
You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server and is deployed to the West US Azure region.
You deploy a new Azure Virtual Desktop host pool named HostPool1 to the East US Azure region.
You need to ensure that all the traffic between HostPool1 and Server1 is routed via the Microsoft backbone network.
What should you use?
- A. Azure Traffic Manager
- B. virtual network peering
- C. routing tables
- D. service endpoints
Answer: D
Explanation:
"Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network." https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview
NEW QUESTION # 67
Your on-premises network contains 20 Windows 10 devices.
You have an Azure Virtual Desktop deployment.
You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices.
What should you do?
- A. Install the MSRDC by using msiexec.exe and the ALLUSERS=1 command line option.
- B. Install the MSRDC by using msiexec.exe and the MSIINSTALLPERUSER=1 command line option.
- C. Install the MSRDC by using msiexec.exe and the ALLUSERS=2 command line option.
Answer: A
Explanation:
Although your users can install the client directly after downloading it, if you're deploying to multiple devices, you may want to also deploy the client to them through other means. Deploying using group policies or the Microsoft Endpoint Configuration Manager lets you run the installer silently using a command line. Run the following commands to deploy the client per-device or per-user.
Per-device installation
msiexec.exe /I <path to the MSI> /qn ALLUSERS=1
Reference:
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-
services/clients/windowsdesktop-admin
NEW QUESTION # 68
You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com.
You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine Contributor role for the Azure subscription to a user named Admin1.
You need to ensure that Admin1 can add session hosts to Pool1. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Assign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1
- B. Generate a registration token
- C. Add Admin1 to the AAD DC Administrators group
- D. Assign a Microsoft 365 Enterprise E3 license to Admin1
- E. Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1
Answer: B,E
Explanation:
The Desktop Virtualization Session Host Operator role allows users to view and remove session hosts, as well as change drain mode. Users can't add session hosts using the Azure portal because they don't have write permission for host pool objects. If the registration token is valid (generated and not expired), users assigned this role can add session hosts to the host pool outside of the Azure portal if they also have the Virtual Machine Contributor role.
NEW QUESTION # 69
You have an Azure Virtual Desktop deployment.
You plan to deploy Update Management to manage automated updates for server-based session hosts.
You need to configure the prerequisites for Update Management.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Create an Azure Automation account.
- B. Configure Azure Network Watcher.
- C. Create an Azure Service Health alert rule.
- D. Create a Log Analytics workspace.
- E. Enable the Application Insights Agent.
Answer: A,D
Explanation:
https://learn.microsoft.com/en-us/azure/architecture/hybrid/azure-update-mgmt
Topic 1, Litware, Inc
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
Existing Environment. Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.
All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
Deploy Windows Virtual Desktop environments to the East US Azure region for the users in the Boston office and to the South India Azure region for the users in the Chennai office.
Implement FSLogix profile containers.
Optimize the custom virtual machine images for the Windows Virtual Desktop session hosts.
Use PowerShell to automate the addition of virtual machines to the Windows Virtual Desktop host pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
Minimize network latency of the Windows Virtual Desktop connections from the Boston and Chennai offices.
Minimize latency of the Windows Virtual Desktop host authentication in each Azure region.
Minimize how long it takes to sign in to the Windows Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
Enforce Azure MFA when accessing Windows Virtual Desktop apps.
Force users to reauthenticate if their Windows Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
Explicitly allow traffic between the Windows Virtual Desktop session hosts and Microsoft 365.
Explicitly allow traffic between the Windows Virtual Desktop session hosts and the Windows Virtual Desktop infrastructure.
Use built-in groups for delegation.
Delegate the management of app groups to CloudAdmin1, including the ability to publish app groups to users and user groups.
Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to the app groups.
Minimize administrative effort to manage network security.
Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
Use PowerShell to generate the token used to add the virtual machines as session hosts to a Windows Virtual Desktop host pool.
Minimize how long it takes to provision the Windows Virtual Desktop session hosts based on the custom virtual machine images.
Whenever possible, preinstall agents and apps in the custom virtual machine images.
NEW QUESTION # 70
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
You need to recommend licenses for the departments. The solution must minimize costs.
Which license should you recommend for each department? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/windows-10-multisession-faq
https://azure.microsoft.com/en-us/pricing/details/virtual-desktop/#pricing
NEW QUESTION # 71
-
You plan to deploy two Azure file shares named Share1 and Share2 that will be used with Azure Virtual Desktop. Share1 will contain at least 100 GB of data and must be stored on SSDs. Share2 must be able to switch between Transaction optimized and Cool storage tiers and must be stored on HDDs.
You need to recommend which type of storage accounts to use for the shares. The solution must minimize costs.
What should you recommend for each share? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?tabs=azure-portal
NEW QUESTION # 72
-
You have two Azure subscriptions that are linked to an Azure Active Directory (Azure AD) tenant named contoso.com and contain an Azure Virtual Desktop deployment. The tenant contains a user named User1.
When User1 signs in to Azure Security Center, the user receives the message shown in the following exhibit.
You need to ensure that User1 can manage security information for the tenant. The solution must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
NEW QUESTION # 73
You have an Azure subscription.
You plan to deploy an Azure Virtual Desktop solution to the East US Azure region. The solution will contain the resources shown in the following table.
You need to recommend a business continuity solution that meets the following requirements:
* Users must be able to connect to HostPool1 if a datacenter in the East US region fails.
* Costs must be minimized.
What should you include in the recommendation for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Availability Zones & ZRS storage.
NEW QUESTION # 74
You have an Azure subscription that contains 500 users. The users are assigned Microsoft Office
365 E1 licenses.
You deploy an Azure Virtual Desktop solution that contains Windows 10 multi-session hosts and streams a custom remote app named App1.
You need to ensure that the users are licensed to stream App1. The solution must minimize costs.
Which license should you use?
- A. Microsoft 365 E5
- B. a Remote Desktop Services (RDS) client access license (CAL)
- C. Office 365 E3
- D. Windows 10 Enterprise E3
Answer: D
Explanation:
App-V client. The App-V client must be enabled on any client device on which apps will be run from the App-V server. These will be the Windows 10/11 Enterprise E3 devices.
Reference:
https://docs.microsoft.com/sv-se/windows/deployment/windows-10-enterprise-e3-overview
NEW QUESTION # 75
You have an Azure Virtual Desktop host pool named Pool1 that contains three session hosts. The session hosts are configured to use FSLogix profile containers.
You need to configure Cloud Cache on the session hosts.
What should you do?
- A. Uninstall the FSLogix agent
- B. Add a VHDLocationsentries to the Windows registry
- C. Configure FSLogix Office Container
- D. Remove VHDLocationsentries from the Windows registry
Answer: D
Explanation:
Removing VHDLocations is part of the process and happens before creating CCDLocations. The fact that creating the CCDLocations is not listed as an answer does not mean there is no "correct" answer. They're not asking you for *all* of the steps in configuring Cloud Cache.
https://docs.microsoft.com/en-us/fslogix/configure-cloud-cache-tutorial
NEW QUESTION # 76
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The subscription contains the virtual networks shown in the following table.
have virtual network peering configured as shown in the following table.
The deployment contains the session hosts shown in the following table.
Windows Defender Firewall is configured on each session host to allow all network traffic between the session hosts For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 77
Your company has a single office and has 40 employees.
You ate planning a Azure Virtual Desktop deployment. The estimated user workloads are shown in the following table.
Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office. Approximately how much bandwidth is needed between the office and Azure lo support the planned workloads?
- A. 220 Mbps
- B. 55 Mbps
- C. 110 Mbps
- D. 9.5 Mbps
Answer: B
NEW QUESTION # 78
You have a Windows Virtual Desktop deployment.
You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).
Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa
NEW QUESTION # 79
-
You have an Azure subscription that contains a user named User1.
The subscription uses the Azure Virtual Desktop host pools shown in the following table.
You need to ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools. The solution must meet the following requirements:
* The apps must be available to the users in all the pools.
* The principle of least privilege must be followed.
* Administrative effort must be minimized.
Which role should you assign to User1, and what is the minimum number of app groups that User1 should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Desktop Virtualization Group
3
NEW QUESTION # 80
You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://www.christiaanbrinkhoff.com/2020/03/01/learn-here-how-to-configure-azure-files-with-active-directory-a
NEW QUESTION # 81
You network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the users shown in the following table.
You have a Windows Virtual Desktop deployment that contains the application groups shown in the following table.
You have the workspaces shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/environment-setup
NEW QUESTION # 82
......
Validate your AZ-140 Exam Preparation with AZ-140 Practice Test: https://www.pass4leader.com/Microsoft/AZ-140-exam.html
Get all the Information About Microsoft AZ-140 Exam 2026 Practice Test Questions: https://drive.google.com/open?id=12ktnv5_44kqckNPEa8aG8eRNHd3TsTtW