AZ-140 exam at a glance
Microsoft Certified: Azure Virtual Desktop Specialty · Intermediate level
| Exam code | AZ-140 |
|---|---|
| Certification | Microsoft Certified: Azure Virtual Desktop Specialty |
| Level | Intermediate |
| Duration | 100 minutes |
| Passing score | 700 or greater |
| Delivery | Proctored exam through Pearson VUE |
| Exam cost | US$165; price varies based on the country or region in which the exam is proctored |
| Languages | English, German, Spanish, French, Japanese, Portuguese (Brazil), Chinese (Simplified) |
| Certification validity | 12 months |
| Retake policy | After the first unsuccessful attempt, wait 24 hours before retaking the exam. A 14-day waiting period applies between subsequent attempts, with no more than five attempts within a 12-month period from the first attempt. |
Candidates should be server or desktop administrators with subject matter expertise in designing, implementing, managing, and maintaining Azure Virtual Desktop experiences and remote apps. Candidates should have experience with Azure compute, networking, identity, storage, and resiliency, and should be able to manage end-user desktop environments by using the Azure portal, templates, scripting, and command-line tools.
Skills measured and their weighting
| Skill area | Weight |
|---|---|
| Plan and implement an Azure Virtual Desktop infrastructure | 40–45% |
| Plan and implement identity and security | 15–20% |
| Plan and implement user environments and apps | 20–25% |
| Monitor and maintain an Azure Virtual Desktop infrastructure | 10–15% |
Source: learn.microsoft.com — official AZ-140 certification page and Microsoft Learn — official AZ-140 study guide. Current skills measured are effective July 20, 2026. Confirm current details there before booking.
The full bank covers every domain, with timed mode and per-domain scoring.
AZ-140 Practice Questions By Domains
4 domains covered1. Plan and implement an Azure Virtual Desktop infrastructure
13 free questions available
2. Plan and implement user environments and apps
9 free questions available
3. Plan and implement identity and security
4 free questions available
4. Monitor and maintain an Azure Virtual Desktop infrastructure
4 free questions available
Practice the full exam, not a sample
Unlock the full bank and practise every domain end to end.
Unlock all 299 questionsMicrosoft AZ-140 Practice Test
The Microsoft AZ-140 practice test helps server and desktop administrators measure their ability to plan, deploy, secure, manage, and support Azure Virtual Desktop. The exam covers much more than creating virtual machines. Candidates must understand host pools, session hosts, identity, networking, storage, FSLogix, applications, monitoring, autoscaling, backup, and disaster recovery. You can Test your knowledge before exam day by using focused assessments to identify weak areas and turn each missed question into a practical study task. This approach makes preparation clearer and more useful than memorizing disconnected product terms.
Microsoft names AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop. The related credential is Microsoft Certified: Azure Virtual Desktop Specialty. It is intended for professionals who design, implement, manage, and maintain virtual desktop experiences and RemoteApp delivery for users on different devices.
This article explains what an AZ-140 practice test should cover, who should use it, how the official domains are weighted, and how practice results can guide your study plan. The domain names, percentage ranges, and topic summaries follow Microsoft’s official skills outline effective July 20, 2026. Microsoft periodically updates role-based exams, so candidates should confirm the latest study guide before scheduling their assessment.
What Is a Microsoft AZ-140 Practice Test?
A Microsoft AZ-140 practice test is a learning assessment based on the tasks performed by an Azure Virtual Desktop administrator. It should measure whether you can select, configure, and troubleshoot the components needed to deliver secure virtual desktops and applications.
Good practice questions use scenarios rather than only definitions. A question may describe users in several locations, a particular sign-in requirement, slow profile loading, a capacity problem, or a need to publish one application without providing a full desktop. You must identify the requirement and choose the Azure Virtual Desktop setting or supporting Azure service that best fits it.
The best use of a mock assessment is diagnosis. A score shows overall performance, but the explanation behind each answer reveals what to study next. You may understand host pools but struggle with FSLogix storage. You may know Microsoft Entra ID but confuse authentication, role-based access, and session-host permissions. Practice makes these gaps visible before they affect the real exam.
An effective AZ-140 practice test can help you:
- Understand the complete Azure Virtual Desktop architecture.
- Compare personal and pooled desktop approaches.
- Plan host pools and session-host capacity.
- Select identity and authentication configurations.
- Secure session hosts, networks, and administrative access.
- Configure profiles, user settings, applications, and device redirection.
- Monitor performance, sessions, logs, and scaling.
- Plan image updates, backups, resiliency, and disaster recovery.
Who Should Prepare for AZ-140?
AZ-140 is suitable for server administrators, desktop administrators, EUC specialists, virtualization engineers, cloud administrators, and support professionals who work with remote desktops or application delivery. It can also benefit experienced Microsoft 365 or Azure administrators who want to specialize in Azure Virtual Desktop.
Microsoft expects candidates to understand Azure compute, networking, identity, storage, and resiliency. Candidates should also be comfortable managing end-user desktop environments, delivering applications, and configuring user settings.
The role works with several teams, including Azure administrators, Azure architects, Microsoft 365 administrators, security engineers, and Azure Local administrators. This means a candidate must understand how Azure Virtual Desktop connects with broader cloud services rather than treating it as an isolated product.
Practical familiarity with the Azure portal is important. Microsoft also expects administrators to use templates, scripts, and command-line tools. You should recognize when PowerShell, Azure CLI, Azure Resource Manager templates, or Bicep can make deployment repeatable and consistent.
Official Microsoft AZ-140 Domains and Percentages
The current AZ-140 skills outline contains four domains.
The percentage ranges show the approximate emphasis of each skill area. Infrastructure carries the largest weight, but a balanced plan is necessary. Identity, profiles, applications, and monitoring directly affect whether an Azure Virtual Desktop deployment works well for real users.
Plan and Implement an Azure Virtual Desktop Infrastructure 40–45%
This is the largest AZ-140 domain. It covers networking, user-data storage, host-pool design, session-host deployment, automation, and image management.
Networking for Azure Virtual Desktop
Candidates should be able to assess network capacity and speed requirements. Virtual desktop performance depends on latency, bandwidth, routing, and the user’s location. A solution that works well for users near one Azure region may provide a poor experience for users on another continent.
The official outline includes designing session-host network configuration, implementing RDP Shortpath, RDP Multipath, quality-of-service policies, Azure Private Link, and network troubleshooting. Learn the purpose of each feature rather than memorizing the name.
RDP Shortpath can establish a more direct transport path for Remote Desktop traffic. RDP Multipath can improve connection resiliency and performance by using multiple paths. Quality-of-service policies help prioritize traffic. Private Link can provide private connectivity to Azure Virtual Desktop service endpoints. A practice scenario may ask you to choose between these controls based on security, performance, or connectivity requirements.
When troubleshooting, follow the connection path. Check name resolution, routing, firewalls, network security groups, user-defined routes, required endpoints, session-host health, and client connectivity. A structured method is faster than changing settings randomly.
Storage for user data
Azure Virtual Desktop commonly uses FSLogix Profile Containers to provide a consistent user profile across session hosts. The profile container is stored separately and attached when the user signs in. Storage performance and availability therefore have a direct effect on sign-in time and user experience.
The official objectives include planning storage for user data, implementing storage for FSLogix, configuring storage accounts and file shares, and using Azure NetApp Files where appropriate. Candidates should compare performance, scale, redundancy, permissions, cost, and regional placement.
The storage service should be close enough to session hosts to avoid unnecessary latency. It must also support the expected number of users and sign-in activity. Permissions must allow authorized users to access their profiles without exposing other users’ data.
Host pools and session hosts
Host pools are a core Azure Virtual Desktop concept. You should understand pooled and personal host pools, load-balancing choices, desktop assignment, application groups, workspaces, and session-host configuration.
Pooled desktops allow multiple users to connect to a shared group of session hosts. Personal desktops assign a specific machine to a user. The best choice depends on user requirements, customization, workload behaviour, cost, and management needs.
The study guide includes recommendations for resource groups, subscriptions, and management groups; operating-system selection; licensing; host-pool architecture; performance; and virtual-machine capacity. Practice questions may require you to balance user density with application requirements and cost.
Capacity planning should consider processor, memory, storage, application demand, user concurrency, login peaks, and expected growth. Do not assume that one VM size or session limit fits every user group. Knowledge workers, developers, designers, and task workers can have very different resource needs.
Implementing and automating host pools
Candidates should be able to create host pools and session hosts through the Azure portal and automate deployment with PowerShell, Azure CLI, ARM templates, and Bicep. Automation helps make environments repeatable, reviewable, and easier to recover.
Study host-pool properties, session limits, load balancing, validation environments, registration, licensing, and session-host settings. Understand Windows client eligibility and Remote Desktop Services Client Access License requirements when Windows Server is used.
When reviewing a practice question, ask whether the requirement is a one-time administrative task or a repeatable enterprise deployment. A declarative template may be a better answer when consistency and scale are important.
Session-host image management
Images help administrators standardize operating systems and applications across session hosts. The outline includes manual image creation, Azure VM Image Builder, image modification, lifecycle management, operating-system and application updates, custom-image deployment, and Azure Compute Gallery.
A dependable image process should be repeatable. Avoid making uncontrolled changes directly on many production session hosts. Instead, create and test an updated image, publish a version, deploy replacement hosts, validate the environment, and remove older hosts safely.
Azure Compute Gallery supports image versions and distribution. Practice scenarios may involve regional deployment, image sharing, update consistency, or rollback. The best design should support both operational control and business continuity.
Plan and Implement Identity and Security 15–20%
This domain covers identity integration, access control, authentication, session-host protection, and network security.
Identity integration
The official outline includes Active Directory Domain Services, Microsoft Entra ID, and Microsoft Entra Domain Services identity scenarios. Candidates should understand the requirements and limitations of each option and how session hosts are joined.
Azure role-based access control governs access to Azure resources and Azure Virtual Desktop management actions. It is different from local or domain permissions inside the session host. Practice questions may test whether a user needs permission to manage host pools, sign in to a desktop, or administer the operating system.
Conditional Access can apply sign-in policies to Azure Virtual Desktop connections. Authentication options include passwordless methods, smart cards, and multifactor authentication. The outline also covers roles, groups, rights assignments, and Microsoft Entra single sign-on.
Keep four questions separate when analyzing identity scenarios:
- How is the user identity stored and synchronized?
- How does the user authenticate?
- What Azure management actions can the user perform?
- What access does the user receive inside the session host?
This separation makes identity questions much easier to solve.
Security for session hosts and connections
Candidates should know how Microsoft Defender for Cloud, Microsoft Defender Antivirus, and Microsoft Defender for Endpoint protect session hosts. Defender for Cloud helps evaluate security posture and recommendations. Defender Antivirus provides anti-malware protection. Defender for Endpoint supports endpoint detection, investigation, response, and vulnerability-related capabilities.
Network security objectives include user-defined routes, network security groups, and Azure Firewall. Administrative access may use Azure Bastion or just-in-time VM access. These controls reduce exposure and help administrators avoid leaving Remote Desktop access open unnecessarily.
Windows protection topics include App Control for Business and Controlled Folder Access. The current outline also includes Azure confidential VMs and Trusted Launch features. Practise matching each control to the risk it addresses instead of assuming every security service solves the same problem.
If you are comparing Azure Virtual Desktop with other Microsoft certification paths, Choose your next Microsoft certification challenge and use practice questions that match the active exam objectives.
Plan and Implement User Environments and Apps 20–25%
This domain focuses on the experience users receive after they connect. It includes profiles, clients, policies, redirection, applications, Microsoft 365 Apps, OneDrive, Teams, browsers, and App attach.
FSLogix configuration
FSLogix is a central AZ-140 topic because it supports portable user profiles in pooled and multi-session environments. Candidates should understand Profile Containers, ODFC containers, Cloud Cache, and application masking.
Profile Containers store a complete user profile in a virtual disk. ODFC containers are focused on Microsoft 365-related profile data. Cloud Cache can use multiple storage locations to improve resiliency, although it also introduces design and operational considerations. Application masking controls which installed applications are visible to particular users or groups.
Practice questions may describe slow sign-ins, inconsistent profiles, storage failures, or different application requirements. Identify whether the issue relates to profile storage, container settings, permissions, cache configuration, or application visibility.
User experience and client settings
Candidates should be able to choose an Azure Virtual Desktop client and deployment method, then deploy and troubleshoot it. The best client can depend on device type, operating system, browser access, organizational management, and supported features.
The outline includes device redirection, multimedia redirection, printing, Universal Print, Microsoft Intune policies, Group Policy, RDP properties, session timeouts, Start VM on Connect, and personal-desktop assignment.
Redirection choices affect both user experience and security. Allowing a local clipboard, drive, printer, microphone, camera, or USB device may help users complete their work, but the organization may need to restrict some features to protect data. Read the scenario carefully before enabling every convenience.
Multimedia redirection can improve video playback by processing supported content on the local device. Microsoft Teams optimization similarly reduces processing load and improves real-time communication. These features can matter significantly in user-experience questions.
Applications on session hosts
The application objectives include deployment methods, application groups, RemoteApp publishing, Microsoft 365 Apps, OneDrive, Teams, browsers, and App attach.
Application groups determine which desktops or RemoteApps users can access. RemoteApp publishes individual applications without giving users a complete desktop. Candidates should understand how users are assigned and how applications are presented through workspaces.
Microsoft 365 Apps require configuration suitable for shared and multi-session environments. OneDrive and Teams also have requirements specific to virtual desktops. The Remote Desktop WebRTC Redirector Service supports optimized Teams media handling.
App attach enables dynamic delivery of applications to session hosts. Rather than building every application into the base image, administrators can package and attach applications as needed. Study how App attach fits with image management, application updates, user assignment, and operational flexibility.
Use Practice Results to Build a Focused Study Plan
A mock-test score should begin the review process, not end it. Tag every incorrect answer with the official domain and the reason for the mistake.
Useful categories include:
- Architecture gap: You did not understand how Azure Virtual Desktop components connect.
- Configuration gap: You knew the service but not the required setting.
- Comparison gap: You confused two identity, storage, networking, or app-delivery options.
- Troubleshooting gap: You changed the wrong layer of the solution.
- Security gap: You overlooked permissions, network controls, endpoint protection, or data exposure.
- Question-reading error: You missed a requirement such as pooled, personal, private, multi-region, or minimum administration.
After review, select one or two weak objectives. Read the related Microsoft documentation, build a small lab, and then answer new questions. This short learning loop is more effective than repeatedly completing the same full assessment.
Start building your exam readiness in the middle of your study journey by combining structured practice with Microsoft Learn, documentation, and hands-on Azure Virtual Desktop tasks.
Monitor and Maintain an Azure Virtual Desktop Infrastructure 10–15%
Although this is the smallest domain, it covers the daily operational work required to keep virtual desktops reliable and efficient.
Monitoring and management
Candidates should understand log collection, Azure Monitor, Azure Virtual Desktop Insights, workbooks, capacity, performance, autoscaling, active sessions, and application groups.
Monitoring should answer clear questions. Are users connecting successfully? Are session hosts healthy? Is sign-in slow? Are profiles loading? Is capacity adequate? Are applications failing? Which hosts are overloaded? Is the environment using more resources than necessary?
Azure Virtual Desktop Insights provides useful views built on Azure Monitor data. Custom workbooks can help teams focus on organizational needs. Practice questions may ask which data source, diagnostic setting, workbook, or metric helps investigate a reported problem.
Autoscaling can start, stop, or deallocate session-host virtual machines based on schedules and demand. A successful plan balances performance with cost. Too little capacity creates login failures or poor performance, while too much idle capacity increases spending.
Administrators also need to manage active sessions. Before maintenance, users may need notification, drain mode, sign-out, or time to finish their work. Learn the difference between preventing new sessions and disconnecting current users.
Updates, backup, and disaster recovery
The official objectives include session-host update strategies, disaster recovery, multi-region deployments, backups, and restore procedures for FSLogix profiles, personal desktops, and images.
Pooled session hosts are often treated as replaceable resources. Updating the base image and redeploying hosts can provide more consistency than manually patching each machine. Personal desktops may contain unique state and therefore need a different protection approach.
FSLogix profiles are business-critical user data. Backup planning should consider retention, recovery time, recovery points, permissions, and testing. Image versions should also be protected or reproducible so session hosts can be rebuilt.
A multi-region strategy should identify dependencies such as identity, profiles, images, applications, networking, and user routing. Deploying session hosts in another region is not enough if users cannot reach their profiles or required applications there.
How to Use AZ-140 Mock Assessments Effectively
Follow a staged method:
- Take a short mixed baseline. Do not look up answers during the first attempt.
- Map mistakes to domains. Separate infrastructure, identity, user environment, and operations gaps.
- Read the requirement carefully. Identify the user type, workload, location, security rule, and performance need.
- Compare the closest options. Explain why the wrong choices fail at least one requirement.
- Check official documentation. Review configuration steps, dependencies, limits, and recommended practices.
- Perform the task in a lab. Create a host pool, configure FSLogix, publish a RemoteApp, or inspect monitoring data.
- Retest with different scenarios. Fresh wording checks genuine understanding.
- Practise under time limits later. First improve accuracy; then improve speed.
Watch for scenario clues such as “pooled,” “personal,” “private access,” “passwordless,” “multi-session,” “profile resiliency,” “individual application,” “reduce cost,” “multi-region,” or “prevent new sessions.” These words often point directly to the required feature.
What You Get When You Prepare With Us
Our AZ-140 preparation approach helps candidates organize a broad technical syllabus into manageable learning goals.
- Official-domain alignment: Practice follows the four current Microsoft skill areas.
- Scenario-based learning: Questions connect Azure Virtual Desktop features to realistic user and business requirements.
- Clear explanations: Reviews help candidates understand why one answer fits better than the alternatives.
- Weak-area tracking: Results show whether more work is needed in infrastructure, security, profiles, applications, or monitoring.
- Flexible sessions: Short topic assessments support daily revision, while mixed tests check overall readiness.
- Practical focus: Missed questions can be converted into portal, PowerShell, Bicep, or troubleshooting exercises.
- Better confidence: Repeated exposure to varied scenarios reduces uncertainty without encouraging answer memorization.
Practice questions should supplement Microsoft Learn, official Azure Virtual Desktop documentation, and hands-on work. They should not be presented as live exam questions or a guarantee of certification success.
Common AZ-140 Preparation Mistakes
Focusing only on virtual machines
Session hosts are important, but Azure Virtual Desktop also depends on identity, networking, storage, profiles, application delivery, monitoring, and service configuration.
Memorizing settings without understanding the user impact
Each choice affects performance, security, cost, or usability. Connect every setting to the reason an administrator would use it.
Ignoring FSLogix storage design
Profile storage performance and availability can determine whether users have fast, consistent sign-ins. Study storage selection, permissions, resilience, and troubleshooting.
Confusing Azure permissions with session-host permissions
Azure RBAC controls management of Azure resources. Operating-system rights and application access are separate. Identify which layer the scenario is asking about.
Treating pooled and personal desktops the same
The two models have different assignment, management, cost, state, and protection considerations. Always identify the user requirement first.
Repeating identical practice questions
Memorized wording creates false confidence. Use new scenarios and explain why alternative choices are unsuitable.
A Four-Week AZ-140 Study Framework
Week 1: Architecture, networking, and storage
Study Azure Virtual Desktop components, host pools, workspaces, application groups, RDP connectivity, Shortpath, Multipath, QoS, Private Link, storage options, file shares, and Azure NetApp Files. Draw a full connection and data-flow diagram.
Week 2: Session hosts, images, identity, and security
Review host-pool design, capacity, licensing, automation, image creation, Azure Compute Gallery, identity scenarios, RBAC, Conditional Access, authentication, single sign-on, Defender, network security, Bastion, JIT access, and Windows protection.
Week 3: Profiles, users, and applications
Study FSLogix containers, Cloud Cache, application masking, clients, policies, redirection, printing, session timeouts, Start VM on Connect, RemoteApp, Microsoft 365 Apps, OneDrive, Teams, browsers, and App attach.
Week 4: Monitoring, scaling, recovery, and mixed review
Review log collection, Azure Monitor, Insights, workbooks, session management, autoscaling, image updates, backups, profile recovery, personal desktops, and multi-region disaster recovery. Finish with fresh mixed assessments and targeted labs.
Frequently Asked Questions
What does Microsoft AZ-140 cover?
AZ-140 covers Azure Virtual Desktop infrastructure, networking, storage, host pools, session hosts, images, identity, security, FSLogix, user settings, applications, monitoring, autoscaling, updates, backup, and disaster recovery.
Which AZ-140 domain has the highest weighting?
Plan and implement an Azure Virtual Desktop infrastructure is the largest domain at 40–45%.
Is FSLogix important for AZ-140?
Yes. The official outline includes Profile Containers, ODFC containers, Cloud Cache, application masking, profile storage, backup, and recovery.
Do I need PowerShell or infrastructure-as-code knowledge?
Yes. Microsoft expects candidates to understand deployment through the portal and automation using PowerShell, Azure CLI, ARM templates, and Bicep.
Does AZ-140 include security topics?
Yes. Topics include identity integration, RBAC, Conditional Access, authentication, Defender services, network security, Bastion, JIT access, threat protection, confidential VMs, and Trusted Launch.
Are practice tests enough to prepare?
No. Combine practice assessments with Microsoft Learn, official documentation, hands-on Azure work, and troubleshooting exercises.
How do I know whether I am becoming ready?
You should perform consistently across fresh question sets and explain why a configuration meets the user, security, performance, and operational requirements. You should also be able to complete common tasks in a lab without relying entirely on step-by-step instructions.