EnglishDeutschFrançaisEspañolPortuguês

Microsoft · AZ-140 · Specialty

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) — Practice Questions and Mock Exam

Practice with realistic AZ-140 questions aligned to the exam objectives. Alex explains every answer, and your readiness score shows what to study next.

50Questions
100minTime Limit
700/ 1000Pass Score

Checked against Microsoft · August 2026Current exam version

About the exam

The AZ-140 certification validates expertise in planning, implementing, managing, and optimizing Azure Virtual Desktop and Windows 365 environments. It covers architecture planning, host pool deployment, session management, user experience configuration, FSLogix profile management, networking, security, and monitoring of virtual desktop infrastructure in Azure.

This specialty certification is designed for Azure administrators and desktop infrastructure engineers who deploy and manage virtualized desktop experiences at scale. Candidates should have hands-on experience with Azure administration, networking, identity, and virtualization technologies to manage enterprise VDI solutions.

What's on the exam

Planning and implementing the Azure Virtual Desktop infrastructure itself carries the most weight at 40–45%: host pool architecture, session-host imaging, storage for FSLogix user profiles, and the connectivity features, RDP Shortpath and Private Link among them, that tie it all together. User environments and app delivery follow at 20–25%, covering FSLogix profile behavior, client configuration, and app publishing through RemoteApp and App Attach. Identity and security (15–20%) and ongoing monitoring and maintenance (10–15%) round out the blueprint.

The heavy infrastructure weighting means AZ-140 tests deployment depth more than day-two operations — expect more questions on getting a host pool and its storage right than on tuning it afterward.

Exam blueprint: AZ-140

Plan and implement an Azure Virtual Desktop infrastructure40–45%

Plan, implement, and manage networking (RDP Shortpath, Private Link, QoS), plan and implement storage for user data (FSLogix, Azure NetApp Files), plan host pools and session hosts (architecture, OS selection, licensing, capacity), implement host pools and session hosts (Azure portal, PowerShell, CLI, ARM/Bicep, host pool/session host settings), and create and manage session host images (VM Image Builder, image lifecycle, OS/app updates, Azure Compute Gallery)

≈ 20 h
Plan and implement identity and security15–20%

Plan and implement identity integration (AD DS, Entra ID, Entra Domain Services identity scenarios, RBAC, Conditional Access, authentication options including passwordless/smart card/MFA, SSO) and plan and implement security (Defender for Cloud, Defender Antivirus, Defender for Endpoint, network security with UDRs/NSGs/Azure Firewall, Bastion/JIT, Windows threat protection, confidential VMs/Trusted Launch)

≈ 8 h
Plan and implement user environments and apps20–25%

Plan and implement FSLogix (Profile Containers, Office Containers, Cloud Cache, application masking), plan and implement user experience and client settings (client selection/deployment, device/multimedia/printing redirection, Intune/Group Policy, RDP properties, session timeouts, Start VM on Connect), and install and configure apps (application groups, RemoteApp, Microsoft 365 apps, OneDrive, Teams, browsers, app attach)

≈ 11 h
Monitor and maintain an Azure Virtual Desktop infrastructure10–15%

Monitor and manage AVD services (log collection/analysis, Azure Monitor, Monitor workbooks for AVD Insights, session host optimization, autoscaling, active sessions/application groups) and plan and implement updates, backups, and disaster recovery (update strategy, disaster recovery plan, multi-region implementation, backup strategy, FSLogix/personal desktop/image backup and restore)

≈ 6 h

Exam format and question types

AZ-140 draws 40–60 questions from a mix of multiple-choice, multiple-select, drag-and-drop, ordering, and dropdown-selection formats inside a 100-minute window. Most items are scenario-based: a host pool, session-host, or FSLogix configuration is described, and you choose the setting or command that meets the stated performance or capacity requirement.

Question types: AZ-140

Multiple Choice41%

Pick the single best answer from four or five options — the exam's bread and butter.

Drag & Drop17%

Drag items into the right slot, group or order — it tests whether you can apply a concept, not just recognise it.

Ordering11%

Put the steps of a process into the correct sequence — typically deployment or troubleshooting workflows.

Multiple Response11%

More than one answer is correct and you need all of them; the question tells you how many to pick.

Dropdown11%

Complete a statement or a configuration by picking from dropdown menus inside the text.

True / False9%

Judge a single statement as true or false — quick points, but the exact wording decides.

Microsoft confirms these question types — a percentage split is not published; the shares reflect our exam-aligned question pool.

Try five AZ-140 questions

Five questions straight from our Configuring and Operating Microsoft Azure Virtual Desktop pool. Answer one — Alex explains the why.

Plan and implement identity and security2 / 5

Your security team wants Azure Virtual Desktop session host VMs to be covered by endpoint detection and response through the Microsoft Defender for Endpoint integration in Microsoft Defender for Cloud. Cost is a concern, so you must enable only the entry-level paid plan that delivers that EDR capability. Which Microsoft Defender for Cloud plan should you enable on the subscription that contains the session hosts?

AlexFull explanation from Alex

Azure Virtual Desktop session hosts are ordinary Azure VMs from Defender for Cloud's perspective, so server-workload protection is delivered by the Defender for Servers plan rather than by an Azure Virtual Desktop specific plan. Selecting the right plan is a matter of matching required capabilities to plan tier, because the plan tier, not the workload type, determines which protections light up on the session hosts.

Sourcelearn.microsoft.com

Plan and implement identity and security5 / 5

A user experiences a Conditional Access error stating that access to a Microsoft Entra ID resource is blocked when signing in to Azure Virtual Desktop through the Windows App web browser. What is the most likely cause?

AlexFull explanation from Alex

When signing in to Azure Virtual Desktop through the Windows App web browser, users must have Conditional Access policies granting access to both the Azure Virtual Desktop and Windows 365 apps. The Windows App authenticates to both apps even if the user is not assigned a Windows 365 Cloud PC. If either app is blocked by CA policies, the user receives an access-blocked error. A host pool reaching its session limit produces a different 'No resources available' error, not a CA error. An expired password triggers a separate authentication failure. Domain join status affects session host registration, not user sign-in CA errors.

Sourcelearn.microsoft.com

418 questions, built like the exam

Every domain of the AZ-140 exam has enough questions in the pool to practice it in depth. A mock exam asks 50 questions in one sitting, on the same 100-minute clock as the real thing.

Audit record: AZ-140

Spec check against MicrosoftAugust 28, 2026

last verified against the official Microsoft source

Pass mark700 / 1,000

as published by Microsoft

Blueprint coverage90 official objectives

across 4 domains, from the official exam guide

Pool size418 questions

= 8 full practice exams of 50 questions each — never the same question twice

Domain coverageall 4 domains at official weight

Plan and implement an Azure Virtual Desktop infrastructure 163 · Plan and implement identity and security 69 · Plan and implement user environments and apps 103 · Monitor and maintain an Azure Virtual Desktop infrastructure 83

Canonically validated418 of 418

each verified against official Microsoft documentation — answer, options and explanation, source cited

Methodology openly documented.How questions are made →

Preparing for AZ-140

How long you'll need depends on how much hands-on experience you bring. The rest is set by the vendor: how the exam is delivered, how soon you can retake it, and how long the credential stays valid.

AZ-140 runs through Pearson VUE, either online with a remote proctor or at an authorized testing center, and is offered in English, German, Spanish, French, Japanese, Portuguese (Brazil), and Chinese (Simplified). Certification holds for one year, and Microsoft opens a free renewal assessment on Learn starting six months before it expires.

Your plan: AZ-140

Preparation

Study time25–70 h

typically around 25 h if you already work with this stack, around 70 h coming to it fresh

LevelSpecialty

Exam day & after

DeliveryPearson VUE online proctored or at authorized testing centers worldwide
Retake policy24-hour wait after the first attempt, 14 days between subsequent attempts, maximum 5 attempts per exam within a 12-month period
Stays valid1 year

Free renewal assessment on Microsoft Learn, available starting 6 months before expiration. Must be completed before the certification expires.

The hours are our own planning estimate — Microsoft publishes no preparation time for this exam. A starting point for your calendar, not a target.

Common pitfalls

FSLogix trips up more candidates than any other topic: profile containers, Office containers, and Cloud Cache solve different problems, and picking the wrong one for a scenario is a common miss. Pooled and personal host pools get confused too — each fits a different user-assignment model, and the exam expects you to match the pool type to a scenario rather than recite the definitions. On the networking side, RDP Shortpath, reverse connect transport, and bandwidth estimation are tested as design decisions, not background trivia, and Microsoft Entra ID join versus hybrid join changes how session hosts get deployed and managed. Autoscale and scaling-plan configuration rounds out the list — getting it wrong costs both user experience and Azure spend.

Watch list: AZ-140

  1. 01FSLogix Configuration

    Not understanding FSLogix profile container, Office container, and Cloud Cache configuration options and when to use each.

  2. 02Host Pool Types

    Confusing pooled vs personal host pool configurations and their appropriate use cases for different user scenarios.

  3. 03Network Planning

    Overlooking RDP Shortpath, reverse connect transport, and bandwidth estimation for optimal virtual desktop performance.

  4. 04Identity Integration

    Struggling with Microsoft Entra ID join vs hybrid join options and their impact on session host deployment.

  5. 05Scaling Plans

    Not configuring autoscale settings and scaling plans correctly for cost optimization and user experience.

Pass-IT trains you on exactly these weak spots — adaptive & spaced →

Frequently asked questions

How long is the Configuring and Operating Microsoft Azure Virtual Desktop exam?

The AZ-140 exam has 50 questions and a 100-minute time limit.

What is the passing score for Configuring and Operating Microsoft Azure Virtual Desktop?

You need 700 / 1000 to pass the AZ-140 exam.

What are common mistakes on the Configuring and Operating Microsoft Azure Virtual Desktop exam?

Common pitfalls include: FSLogix Configuration, Host Pool Types, Network Planning, Identity Integration, Scaling Plans. Focus study time on these areas to avoid losing points.

Which AZ-140 topics carry the most marks?

Planning and implementing the Azure Virtual Desktop infrastructure dominates at 44%, with user environments and applications at 24%, identity and security at 18% and monitoring and maintenance at 14%. Close to half the exam is therefore the build itself. That weighting is unusually top-heavy even for a specialty exam.

Do you need AZ-104 before AZ-140?

No. Microsoft sets no formal prerequisite, so AZ-140 can be booked directly. It is a specialty exam, though, and it assumes Azure networking, identity and storage as background rather than teaching them, which is what AZ-104 covers. The catalog budget of 45 hours is written on that assumption.

How often do you have to renew AZ-140?

Once a year. The free renewal assessment opens on Microsoft Learn six months before the expiry date and has to be completed before it, not after. Miss the window and the certification lapses rather than entering a grace period.

How soon can you retake AZ-140?

Twenty-four hours after the first attempt, then 14 days between each later one. Microsoft allows five attempts at the same exam within a 12-month period.

Pass-IT is an independent study tool, not affiliated with or endorsed by Microsoft; Microsoft and exam names are trademarks of their respective owners.

One certification. One payment.

Full AZ-140 access

Get the full question pool for this certification. Alex explains every answer, and your readiness score shows what to work on next.

Buy AZ-140 access for $29.99One payment. Lifetime access to this certification.
Take the free readiness check20 questions. No card. See what to study before you buy.

Reach 80% readiness and pass — or your money back.

How the score works →