EnglishDeutschFrançaisEspañolPortuguês

Microsoft · AZ-140 · Specialty

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) — Practice Questions and Mock Exam

The AZ-140 certification validates expertise in planning, implementing, managing, and optimizing Azure Virtual Desktop and Windows 365 environments.

Practice for freeTry a practice question first
Try a practice question firstPractice for free
Start practicing AZ-140 freeBuy AZ-140 access for $29.99
50Questions per Pass-IT mock exam
100minPass-IT mock exam time limit

Official AZ-140 exam: 700 out of 1000 points to pass.

Checked against Microsoft · August 2026 · Current exam version

Try Pass-IT

See what learning with Pass-IT is like.

Answer a AZ-140 sample question and read the explanation with its source. Right here, with no sign-up.

Plan and implement identity and security2 / 5

Your security team wants Azure Virtual Desktop session host VMs to be covered by endpoint detection and response through the Microsoft Defender for Endpoint integration in Microsoft Defender for Cloud. Cost is a concern, so you must enable only the entry-level paid plan that delivers that EDR capability. Which Microsoft Defender for Cloud plan should you enable on the subscription that contains the session hosts?

AlexFull explanation from Alex

Azure Virtual Desktop session hosts are ordinary Azure VMs from Defender for Cloud's perspective, so server-workload protection is delivered by the Defender for Servers plan rather than by an Azure Virtual Desktop specific plan. Selecting the right plan is a matter of matching required capabilities to plan tier, because the plan tier, not the workload type, determines which protections light up on the session hosts.

Sourcelearn.microsoft.com

Plan and implement identity and security5 / 5

A user experiences a Conditional Access error stating that access to a Microsoft Entra ID resource is blocked when signing in to Azure Virtual Desktop through the Windows App web browser. What is the most likely cause?

AlexFull explanation from Alex

When signing in to Azure Virtual Desktop through the Windows App web browser, users must have Conditional Access policies granting access to both the Azure Virtual Desktop and Windows 365 apps. The Windows App authenticates to both apps even if the user is not assigned a Windows 365 Cloud PC. If either app is blocked by CA policies, the user receives an access-blocked error. A host pool reaching its session limit produces a different 'No resources available' error, not a CA error. An expired password triggers a separate authentication failure. Domain join status affects session host registration, not user sign-in CA errors.

Sourcelearn.microsoft.com

How to prepare for AZ-140 with Pass-IT.

Currently 411 practice questions for AZ-140, with new ones added regularly. Focus on what you still need to learn.

Get past difficult questions.

Understand why an answer is correct. Alex explains the concepts and answers your follow-up questions so you can apply what you learn to the next task.

Meet Alex →

Conversation preview · AZ-140

Start VM on Connect

  1. You

    Will signing in start every VM in my personal host pool?

  2. Alex · AI tutor

    No. In this example, it starts the VM assigned to the connecting user.

    Read the Microsoft documentation ↗
  3. You

    Why does the personal assignment matter?

  4. Alex · AI tutor

    The user has a specific desktop. Start VM on Connect starts that assigned host when needed.

    Read the Microsoft documentation ↗

Make your study time count.

Practice at your level.
For new practice sessions, Pass-IT adjusts the difficulty based on your previous answers.

Learn from mistakes.
Incorrect answers automatically become flashcards. When you review them, you rate how confidently you remember; Pass-IT schedules the next review.

See how focused practice works →

Animated feature preview

Turn your mistakes into knowledge you can rely on.

How Pass-IT works

Your review

Answered a question incorrectly?

Pass-IT saves it for your review.

AZ-140 · Question excerpt

Start VM on Connect

View the full question

You need to enable Start VM on Connect for a personal host pool in Azure Virtual Desktop. The host pool has three session hosts, each assigned to a different user. All VMs are currently deallocated. User A connects. What happens?

Understand the correct answer.

Only the VM assigned to User A starts

For User A in this personal host pool, only User A’s assigned VM starts.

Read the Microsoft documentation ↗

How confidently do you remember?

During review, you assess how well you still know the answer.

Correct after hesitating

Pass-IT schedules your next review.

The date depends on your self-assessment and previous reviews.

Simplified demonstration. No learning progress is saved.

Practice for the moment that counts.

Take a full mock exam with a time limit and find out whether you can finish in time.

Your AZ-140 mock exam

Questions
50
Minutes
100

Illustration of an exam session

  1. Start
  2. Answer questions
  3. Finish

Length and time limit of the Pass-IT mock exam.

Go into your exam with more confidence.

Your Readiness Score helps you assess whether you are ready for the exam. Results by exam domain show you where you should keep practicing.

Your money back if you fail despite 80% Readiness.
If your Readiness Score is at least 80% when you take the exam and you still fail, we refund the Pass-IT purchase price for this certification.

For active, paid access. Submit proof of failing within 14 days.

Further guarantee conditions

You need at least 80% Readiness and active, paid access to the certification when you take the exam. Take the exam within your access period and submit official proof of failing within 14 days after the exam.

For purchases through Apple or Google, refunds are handled by the respective store. See the full terms for further details.

Read the guarantee terms →

The Readiness Score describes your practice progress, not a probability of passing.

Guarantee requirement

80%

At least 80% Readiness
when you take the exam

Money back if you fail

Question counts and mock exam settings from the current Pass-IT catalog.

Exam domains

What you practice for AZ-140.

Exam topics, relevant practice and sources you can check.

Virtual desktop infrastructure40–45% of the exam162 QuestionsPass-IT questions

Plan and deploy the networks, storage and session hosts for Azure Virtual Desktop.

  • Size and configure the network, including RDP Shortpath, RDP Multipath, quality of service and Private Link; monitor connections and resolve faults.
  • Plan storage for user data and FSLogix, and configure storage accounts, file shares and Azure NetApp Files.
  • Choose resource organization, host-pool architecture, operating systems and licensing; size session hosts for performance and virtual-machine capacity.
  • Create and configure pools and hosts through the portal or automate them with PowerShell, Azure CLI, ARM templates and Bicep; apply Windows client eligibility and Windows Server RDS CAL requirements.
  • Build and update images manually or with Azure VM Image Builder; manage their lifecycle and storage in Azure Compute Gallery and deploy hosts from custom images.
Official Microsoft objectives
Identity and session-host security15–20% of the exam64 QuestionsPass-IT questions

Configure sign-in, access permissions and protection for virtual desktops.

  • Choose AD DS, Microsoft Entra ID or Microsoft Entra Domain Services; meet host-join requirements and configure Azure RBAC, host roles, groups and rights.
  • Apply Conditional Access and single sign-on, and configure passwordless, smart-card and multifactor authentication options.
  • Protect hosts with Defender for Cloud, Defender Antivirus and Defender for Endpoint, including device onboarding and scanning.
  • Secure connections with user-defined routes, network security groups and Azure Firewall; configure Azure Bastion or just-in-time administrative access.
  • Configure App Control for Business, Controlled Folder Access, confidential virtual machines and Trusted Launch for session hosts.
Official Microsoft objectives
User profiles, clients and applications20–25% of the exam103 QuestionsPass-IT questions

Prepare profiles, client settings and applications for desktop sessions.

  • Choose an FSLogix configuration and set up Profile Containers, Office Data File Containers, Cloud Cache and application masking.
  • Select, deploy and troubleshoot clients; configure device and multimedia redirection, printing and Universal Print.
  • Apply Intune or Group Policy settings, host-pool RDP properties and session timeouts; configure Start VM on Connect and assign or unassign personal desktops.
  • Choose an application deployment method, create application groups, assign users and publish RemoteApp applications.
  • Manage Microsoft 365 Apps, OneDrive in multisession environments, Teams with the Remote Desktop WebRTC Redirector Service, and session browsers.
  • Package applications for App attach and configure their dynamic delivery to session hosts.
Official Microsoft objectives
Monitoring, maintenance and recovery10–15% of the exam82 QuestionsPass-IT questions

Monitor the service and plan capacity, updates and recovery.

  • Collect and analyze host logs with Azure Monitor, and customize workbooks for Azure Virtual Desktop Insights.
  • Tune host capacity and performance, configure pool autoscaling and manage active sessions and application groups.
  • Recommend host update methods and design disaster recovery, including deployments across multiple regions.
  • Implement a backup strategy and configure backup and restore for FSLogix profiles, personal desktops and images.
Official Microsoft objectives
Question formats you can practice
Multiple Choice
Select one answer.
Multiple Response
Select multiple applicable answers.
True / False
Decide whether statements are true or false.
Drag & Drop
Match items to the appropriate targets.
Ordering
Put steps in the correct order.
Dropdown
Choose the appropriate entry from a dropdown list.

These are Pass-IT practice formats. Check the Microsoft certification page for the official exam information.

The ranges describe the weighting of exam topics. See Official Microsoft objectives for the current exam objectives.

Frequently asked questions

Your preparation

How much study time should I plan for AZ-140?

For planning, Pass-IT estimates roughly 25–70 hours. Relevant experience may put you toward the lower end; starting from scratch may put you toward the higher end. Your needs may fall outside this range. This is not a time requirement from Microsoft or a promise that you will be exam-ready within that time.

Do you need AZ-104 before AZ-140?

No. Microsoft sets no formal prerequisite, so AZ-140 can be booked directly. It is a specialty exam, though, and it assumes Azure networking, identity and storage as background rather than teaching them, which is what AZ-104 covers. The catalog budget of 45 hours is written on that assumption.

Using Pass-IT

What language are Pass-IT questions in?

Questions in the app are currently in English. Translations of the sample questions on this page apply only to this preview. Check with Microsoft for the languages available for the official exam.

How long does my AZ-140 access last?

Access covers this certification for 12 months. You pay once, with no automatic renewal.

When does the money-back guarantee apply?

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days. Guarantee terms

About the AZ-140 exam

Where can I take the AZ-140 exam?

Pearson VUE online proctored or at authorized testing centers worldwide.

How long is the Configuring and Operating Microsoft Azure Virtual Desktop exam?

The AZ-140 exam has 50 questions and a 100-minute time limit.

How often do you have to renew AZ-140?

Once a year. The free renewal assessment opens on Microsoft Learn six months before the expiry date and has to be completed before it, not after. Miss the window and the certification lapses rather than entering a grace period.

How soon can you retake AZ-140?

Twenty-four hours after the first attempt, then 14 days between each later one. Microsoft allows five attempts at the same exam within a 12-month period.

Your preparation for AZ-140

$29.99one-time

12 months of access for AZ-140 · No automatic renewal

Buy AZ-140 access

Questions in the app are currently in English.

Try 20 questions for freeFree account required. No credit card.

Already have an account? Log in

Prefer a subscription? View subscriptions →

Money back if you fail with at least 80% Readiness, for eligible purchases under the guarantee terms.

Guarantee terms

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days.

Full guarantee terms →

Related certifications

Administering Information Security in Microsoft 365Administering Microsoft Azure SQL SolutionsAdministering Windows ServerCollaboration Communications Systems EngineerAll Microsoft certifications →