MICROSOFT CERTIFICATION
AZ-140 Azure Virtual Desktop Specialty Practice Exam
Exam Number: 3105 | Last updated 16-Apr-26 | 995+ questions across 5 vendor-aligned objectives
The AZ-140 Azure Virtual Desktop Specialty certification validates the skills of administrators who plan, deploy, and manage Azure Virtual Desktop environments. This exam measures your ability to work with Azure Virtual Desktop, FSLogix, Microsoft Entra ID, Azure Monitor, Azure Networking, demonstrating both conceptual understanding and practical implementation skills required in today’s enterprise environments.
The heaviest exam domains include Plan and Implement an Azure Virtual Desktop Infrastructure (40–45%), Plan and Implement User Environments and Apps (20–25%), and Plan and Implement Identity and Security (15–20%). These areas collectively represent the majority of exam content and require focused preparation across their respective subtopics.
Additional domains tested include Monitor and Maintain an Azure Virtual Desktop Infrastructure (10–15%), and Manage Connectivity and Resources (10–15%). Together, these areas round out the full exam blueprint and ensure candidates possess well-rounded expertise across the certification scope.
Every answer links to the source. Each explanation below includes a hyperlink to the exact Microsoft documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →
416
practice exam users
92.3%
satisfied users
91.5%
passed the exam
4.9/5
quality rating
Test your AZ-140 Azure Virtual Desktop Specialty knowledge
10 of 995+ questions
Question #1 - Plan and Implement an Azure Virtual Desktop Infrastructure
A consulting firm with 500 users deploys AVD. Most users run the same set of Office apps. The team wants to minimize storage costs and simplify image management.
Which session host image strategy should be used?
A) Assign dedicated VMs to each user with local profiles
B) Use pooled host pools with a shared golden image
C) Use Azure Container Instances for each session
D) Deploy personal desktops with individual customizations
Show solution
Correct answers: B – Explanation:
Pooled host pools with a golden image serve multiple users from identical VMs, reducing storage costs and simplifying updates. Dedicated VMs are costly at scale. Personal desktops increase management overhead. Container Instances are not designed for desktop sessions. Source: Check Source
Question #2 - Plan and Implement an Azure Virtual Desktop Infrastructure
A consulting firm with 500 users deploys AVD. Most users run the same Office apps. The team wants to minimize storage and simplify image management.
Which session host image strategy should be used?
A) Deploy personal desktop host pools where each user customizes their own machine
B) Use pooled host pools with session hosts built from a shared managed golden image
C) Use Azure Container Instances to run isolated per-session desktop environments
D) Assign a dedicated persistent VM to each user with a locally stored personal profile
Show solution
Correct answers: B – Explanation:
Pooled host pools with a golden image serve multiple users from identical VMs, reducing storage costs and simplifying updates to a single image. Dedicated persistent VMs are costly at 500-user scale. Personal desktop pools increase image management overhead per user. Container Instances are not designed for full Windows desktop session hosting. Source: Check Source
Question #3 - Plan and Implement an Azure Virtual Desktop Infrastructure
An architecture firm uses AVD with graphics-intensive CAD applications. Users report poor rendering during peak hours.
Which scaling approach addresses peak-hour performance?
A) Reduce the maximum session limit per host to lower resource contention on each VM
B) Add GPU-enabled NV-series VMs to the host pool to increase graphics processing capacity
C) Configure breadth-first load balancing to distribute users more evenly across hosts
D) Switch all users to Standard D-series VMs with additional CPU cores for computation
Show solution
Correct answers: B – Explanation:
GPU-enabled NV-series VMs provide hardware acceleration essential for CAD rendering. Adding more during peak handles increased demand. D-series VMs lack GPU acceleration needed for graphics workloads. Breadth-first balancing distributes users but does not add capacity or GPU capability. Reducing session limits without adding hosts reduces total available capacity for the firm. Source: Check Source
Question #4 - Plan and Implement an Azure Virtual Desktop Infrastructure
A financial company wants AVD sessions to automatically scale up before business hours and scale down at night to save costs.
Which feature should the admin configure?
A) AVD autoscale plans with configurable ramp-up, peak, ramp-down, and off-peak schedules
B) Azure Automation runbooks with custom PowerShell scripts scheduled via cron-style triggers
C) Azure Reserved VM Instances purchased for the maximum number of needed session hosts
D) Manual start and stop of session host VMs performed by the operations team each day
Show solution
Correct answers: A – Explanation:
AVD autoscale plans natively support scheduled phases (ramp-up, peak, ramp-down, off-peak) with configurable thresholds and host management. Automation runbooks work but add complexity when native scaling exists. Manual daily start/stop is error-prone and requires weekend/holiday coverage. Reserved instances reduce per-VM cost but do not dynamically scale the number of running hosts. Source: Check Source
Question #5 - Plan and Implement an Azure Virtual Desktop Infrastructure
A hospital needs AVD hosts deployed across fault domains to ensure availability during datacenter maintenance.
Which deployment option provides the strongest fault isolation?
A) Deploy all session hosts in a single availability set across update and fault domains
B) Deploy session hosts without any availability configuration in the default placement
C) Use Azure Traffic Manager to distribute user connections across hosts in a single zone
D) Deploy session hosts across Availability Zones in separate physical datacenter buildings
Show solution
Correct answers: D – Explanation:
Availability Zones distribute VMs across physically separate datacenter buildings in a region, providing the highest fault isolation. Availability sets distribute across fault domains within a single datacenter. No availability configuration provides no redundancy guarantees. Traffic Manager routes DNS traffic but does not provide compute-level fault isolation. Source: Check Source
Question #6 - Plan and Implement User Environments and Apps
A law firm using AVD needs user profiles to persist across session hosts so users get their settings on any machine.
Which profile management solution should be implemented?
A) Roaming profiles delivered through Group Policy from an on-premises file share
B) Local profiles stored individually on each session host operating system disk
C) OneDrive Known Folder Move synchronizing desktop and documents folders only
D) FSLogix profile containers mounted from Azure Files at logon for each user session
Show solution
Correct answers: D – Explanation:
FSLogix profile containers store entire user profiles in VHD files on Azure Files, providing fast logon and consistent experiences across any host. Local profiles are lost when users connect to different session hosts. Roaming profiles via Group Policy are slow with large profiles and legacy technology. OneDrive KFM syncs document folders but does not manage full desktop profiles, app settings, or registry. Source: Check Source
Question #7 - Plan and Implement User Environments and Apps
An accounting firm needs to deliver a legacy desktop application to AVD users without installing it on every session host image.
Which app delivery method should be used?
A) Configure each user to download and run a portable version of the application locally
B) Install the application directly in the golden image and redeploy all session hosts
C) MSIX app attach dynamically mounting the application package to sessions at user logon
D) Publish the application as a RemoteApp program from a dedicated separate host pool
Show solution
Correct answers: C – Explanation:
MSIX app attach dynamically mounts application packages at logon without modifying the session host image, simplifying updates and reducing image maintenance. Installing in the golden image requires full redeployment for every application update. RemoteApp from a separate pool adds infrastructure cost and management. User self-install of portable apps is unmanageable and may violate licensing or security policies. Source: Check Source
Question #8 - Plan and Implement Identity and Security
A government agency requires MFA for all AVD connections and blocking access from non-compliant devices.
Which identity configuration should the admin implement?
A) A mandatory VPN tunnel requirement established before any AVD connection attempt
B) Entra ID Conditional Access policies requiring MFA and evaluating device compliance state
C) Azure AD Domain Services with basic password complexity and length policy rules
D) Local Windows user accounts configured individually on each session host machine
Show solution
Correct answers: B – Explanation:
Entra ID Conditional Access evaluates conditions like MFA completion and device compliance before granting access to AVD. Local accounts lack centralized policy enforcement. AADDS with basic password rules does not enforce MFA or device compliance checks. VPN adds a network layer but does not replace identity-based conditional evaluation of device state and authentication strength. Source: Check Source
Question #9 - Plan and Implement Identity and Security
A design agency needs to restrict AVD users from copying data from their virtual desktop to their local machine via clipboard.
Which AVD configuration prevents clipboard redirection?
A) Disable clipboard redirection in the host pool RDP properties configuration settings
B) Distribute a written policy instructing users to refrain from using copy-paste operations
C) Configure Azure Firewall application rules to inspect and block clipboard data transfers
D) Remove clipboard-related driver files and libraries from the session host golden image
Show solution
Correct answers: A – Explanation:
RDP properties on the host pool control device redirections including clipboard. Disabling clipboard redirection prevents data transfer between the session and local machine. Azure Firewall operates at the network level and cannot inspect or block RDP feature-level clipboard data. Removing drivers may cause system instability and is not the supported configuration method. Written policies are informational and cannot technically enforce restrictions. Source: Check Source
Question #10 - Monitor and Maintain an Azure Virtual Desktop Infrastructure
IT notices some AVD users experiencing logon times exceeding 60 seconds. They need to diagnose the bottleneck.
Which tool should the team use to investigate logon performance?
A) Azure Monitor AVD Insights workbook with detailed logon phase breakdown diagnostics
B) Windows Event Viewer logs inspected manually on a randomly selected single session host
C) Azure Cost Management analysis to identify if session host SKU changes impacted performance
D) Azure Service Health dashboard checking for ongoing platform incidents in the region
Show solution
Correct answers: A – Explanation:
AVD Insights in Azure Monitor provides detailed logon diagnostics breaking down connection time, authentication, profile load, shell start, and GPO processing phases. Cost Management tracks spending, not user experience performance. Event Viewer on one host may miss systemic issues and lacks the aggregated cross-host view. Service Health reports platform-wide outages, not user-level logon performance bottlenecks. Source: Check Source
Get 995+ more questions with source-linked explanations
Every answer traces to the exact Microsoft documentation page — so you learn from the source, not just memorize answers.
Exam mode & learn mode · Score by objective · Updated 16-Apr-26
Learn more...
What the AZ-140 Azure Virtual Desktop Specialty exam measures
- Plan and Implement an Azure Virtual Desktop Infrastructure (40–45%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Plan and Implement Identity and Security (15–20%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Plan and Implement User Environments and Apps (20–25%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Monitor and Maintain an Azure Virtual Desktop Infrastructure (10–15%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Manage Connectivity and Resources (10–15%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
How to prepare for this exam
- Review the official exam guide to understand every objective and domain weight before you begin studying
- Complete the relevant Microsoft Learn learning path to build a structured foundation across all exam topics
- Get hands-on practice in an Azure free-tier sandbox or trial environment to reinforce what you have studied with real configurations
- Apply your knowledge through real-world project experience — whether at work, in volunteer roles, or contributing to open-source initiatives
- Master one objective at a time, starting with the highest-weighted domain to maximize your score potential early
- Use PowerKram learn mode to study by individual objective and review detailed explanations for every question
- Switch to PowerKram exam mode to simulate the real test experience with randomized questions and timed conditions
Career paths and salary outlook
Earning this certification can open doors to several in-demand roles:
- Azure Virtual Desktop Engineer: $105,000–$140,000 per year (based on Glassdoor and ZipRecruiter data)
- Desktop Infrastructure Architect: $115,000–$155,000 per year (based on Glassdoor and ZipRecruiter data)
- End User Computing Specialist: $95,000–$130,000 per year (based on Glassdoor and ZipRecruiter data)
Official resources
Microsoft provides comprehensive free training to prepare for the AZ-140 Azure Virtual Desktop Specialty exam. Start with the official Microsoft Learn learning path for structured, self-paced modules covering every exam domain. Review the exam study guide for the complete skills outline and recent updates.