Microsoft AZ-140: Configuring and Operating Azure Virtual Desktop Practice Exam
Cover all four AZ-140 skill areas — AVD infrastructure, user environments and apps, identity and security, and monitoring and maintenance — with scenario questions, immediate feedback in Learn mode, and full timed simulation in Exam mode.
Start 24-hour free trial →AZ-140 exam at a glance
- Vendor
- Microsoft (Azure)
- Exam code
- AZ-140 (Configuring and Operating Microsoft Azure Virtual Desktop)
- Certification
- Microsoft Certified: Azure Virtual Desktop Specialty
- Level
- Specialty (role-based; single-technology focus)
- Blueprint
- Skills measured as of April 17, 2026 (current edition)
- Format
- Typically 40–60 questions; multiple choice, multiple response, drag-and-drop, and case studies
- Duration
- About 100–120 minutes
- Passing score
- 700 of 1000 (scaled, not a raw percentage)
- Delivery
- Pearson VUE test center or online proctored
- Recommended experience
- Solid Azure administration skills (compute, networking, identity, storage, resiliency) plus desktop/VDI background; AZ-104-level knowledge is the usual on-ramp
- Cost (USD)
- $165 USD list price (specialty tier; varies by region)
- Validity
- Valid one year; renewed free via an online assessment on Microsoft Learn
Source: Microsoft Learn — AZ-140 study guide (skills measured) and the Azure Virtual Desktop Specialty certification page. Verify current details with Microsoft before scheduling.
About the Microsoft Certified: Azure Virtual Desktop Specialty certification
AZ-140 validates that you can plan, deliver, manage, and operate Microsoft Azure Virtual Desktop (AVD) — the cloud VDI service that streams Windows desktops and remote apps to any device. It is a specialty certification (a focused, single-technology credential, distinct from the broader associate and expert tiers), and a single exam earns it. Expect deep, scenario-based questions on host pools and session hosts, session-host images, FSLogix profile containers, networking and storage for AVD, identity and Conditional Access, app delivery, and monitoring with autoscaling.
AZ-140 is an active exam (current edition dated April 17, 2026, with only minor clarifications from the prior version). It is not an entry point: Microsoft expects solid Azure administration skills across compute, networking, identity, and storage. The usual on-ramp is the AZ-104 Azure Administrator route, and newcomers should take AZ-900 Azure Fundamentals first. Because roughly half the exam is AVD infrastructure — much of it networking — the AZ-700 Azure Network Engineer material also reinforces the heaviest area.
Every PowerKram practice question maps to one of the four AZ-140 skill areas and links to the specific Microsoft Learn page it was derived from, so your weak spots become a focused reading list rather than a guess.
AZ-140 skill areas and weights
Four skill areas, with AVD infrastructure by far the heaviest at 40–45% — nearly half the exam. Microsoft published each area as a weighting range rather than an exact percentage; the ranges below are reproduced as Microsoft stated them in the current edition.
Networking for AVD (capacity, RDP Shortpath and QoS, Private Link, troubleshooting); storage for user data and FSLogix components (Azure Files, Azure NetApp Files); planning and implementing host pools and session hosts (OS and licensing choices, host-pool architecture, Azure portal and automation with PowerShell, CLI, ARM, and Bicep); and creating and managing session-host images (including Azure VM Image Builder and Azure Compute Gallery).
FSLogix profile containers, Office containers, Cloud Cache, and application masking; user experience and client settings (client choice and deployment, device and multimedia redirection, Universal Print, Intune or Group Policy settings, RDP properties, session timeouts); and installing and configuring apps (application groups, RemoteApp, Microsoft 365 apps, OneDrive, Teams with WebRTC redirector, and app attach).
Identity integration (AD DS, Microsoft Entra ID, and Entra Domain Services scenarios, Azure RBAC, Conditional Access, MFA and passwordless, single sign-on); and security (Microsoft Defender for Cloud and Defender for Endpoint on session hosts, network security with UDRs, NSGs, and Azure Firewall, Azure Bastion or JIT access, and confidential VMs and Trusted Launch).
Monitoring and managing AVD services (log collection, Azure Monitor and AVD Insights workbooks, optimizing session-host capacity, autoscaling host pools, managing active sessions); and updates, backups, and disaster recovery (session-host update strategy, multi-region and DR planning, and backup and restore for FSLogix profiles, personal desktops, and images).
Source: Microsoft Learn — AZ-140 study guide (skills measured, as of April 17, 2026). Microsoft published weightings as ranges; AVD infrastructure is by far the heaviest area.
Who AZ-140 is for
The Azure Virtual Desktop Specialty certification is aimed at administrators who deliver and operate cloud VDI:
- Desktop and endpoint administrators delivering Windows desktops and remote apps from Azure to any device.
- Azure administrators extending their skills into virtual-desktop infrastructure and multi-session environments.
- VDI specialists migrating on-premises virtual desktop infrastructure to Azure Virtual Desktop.
- Infrastructure engineers responsible for session hosts, FSLogix profiles, and end-user experience at scale.
AZ-140 is not an entry point — Microsoft expects solid Azure administration skills across compute, networking, identity, and storage. The usual on-ramp is the AZ-104 Azure Administrator route, and newcomers should take AZ-900 Azure Fundamentals first. For the roles this credential supports — with skills, tools, and salary ranges — see the IT Administrator career path.
What this AZ-140 practice exam delivers
Learn mode
Get the correct answer, the reasoning, and a direct link to the exact Microsoft Learn page each question was derived from — immediately after each question. Built for the AVD configuration and troubleshooting scenarios the exam tests across host pools, FSLogix, and networking.
Exam mode
A timed run in the AZ-140 shape — roughly 40 to 60 questions in about 100 to 120 minutes, including case studies — so you build pacing for the exam’s scenario-heavy format.
Source-linked explanations
Every answer cites the exact Microsoft Learn documentation page it was built from — so you can verify AVD behavior and configuration, not just memorize.
Score by skill area
Results break down by the four AZ-140 areas — infrastructure, user environments and apps, identity and security, and monitoring — so practice tells you exactly which area to revisit.
Sample AZ-140 practice questions
Ten free questions across the four AZ-140 skill areas, with full explanations and source links to the Microsoft Learn pages each is derived from. The complete bank is available with the 24-hour trial.
You are deploying Azure Virtual Desktop and need a logical container that groups session hosts and to which you assign application groups and users.
Which Azure Virtual Desktop object should you create?
- A host pool
- A network security group
- An FSLogix container
- An Azure Compute Gallery
Show answer & explanation
Correct: A — a host pool. A host pool is the core AVD object that groups identical session hosts; application groups and user assignments attach to it — exactly the container described. It can be pooled (multi-session) or personal.
Why not the others: an NSG (B) filters network traffic; an FSLogix container (C) stores a user profile; an Azure Compute Gallery (D) stores session-host images. None groups session hosts for assignment.
Source: Microsoft Learn — Deploy Azure Virtual Desktop → Further reading: PowerKram — AZ-104 Azure Administrator →Users on a pooled multi-session host pool need their profiles to roam consistently between session hosts, loading quickly at sign-in without bloating each host’s local disk.
Where should you store the FSLogix profile containers?
- On the C: drive of each session host
- On Azure Files or Azure NetApp Files shares
- In an Azure Compute Gallery
- In a Recovery Services vault
Show answer & explanation
Correct: B — on Azure Files or Azure NetApp Files shares. FSLogix profile containers are stored on a shared, high-performance file service — Azure Files or Azure NetApp Files — so profiles roam across session hosts and load at sign-in, exactly as described. Storage choice is a core AZ-140 infrastructure decision.
Why not the others: local C: drives (A) do not roam between hosts; a Compute Gallery (C) stores images; a Recovery Services vault (D) holds backups, not live profiles.
Source: Microsoft Learn — FSLogix profile containers on Azure Files → Further reading: PowerKram — AZ-800 Windows Server Hybrid Admin →You want to reduce latency and improve the remoting experience by establishing a direct UDP transport between the AVD client and the session host, rather than relying on the TCP-based reverse connect gateway.
Which AVD networking feature should you implement?
- Azure Firewall
- VNet peering
- RDP Shortpath
- A Recovery Services vault
Show answer & explanation
Correct: C — RDP Shortpath. RDP Shortpath establishes a direct UDP-based transport between client and session host, improving latency and responsiveness over the default TCP reverse-connect path — exactly the networking optimization described.
Why not the others: Azure Firewall (A) filters traffic; VNet peering (B) connects virtual networks; a Recovery Services vault (D) is for backup. None is the direct UDP remoting transport.
Source: Microsoft Learn — RDP Shortpath for Azure Virtual Desktop → Further reading: PowerKram — AZ-700 Azure Network Engineer →You need a repeatable, versioned way to build and store custom session-host images with your applications preinstalled, then deploy new session hosts from them across regions.
Which Azure service should you use to store and distribute the images?
- Azure Files
- Azure Key Vault
- Azure Compute Gallery
- FSLogix Cloud Cache
Show answer & explanation
Correct: C — Azure Compute Gallery. Azure Compute Gallery stores, versions, and replicates VM images across regions, so you can build custom session-host images (often with Azure VM Image Builder) and deploy hosts from them consistently — exactly the image-lifecycle need described.
Why not the others: Azure Files (A) stores file shares and profiles; Key Vault (B) stores secrets; FSLogix Cloud Cache (D) replicates user profiles, not images.
Source: Microsoft Learn — Deploy Azure Virtual Desktop (images) →A single application must be delivered to users as a published app in its own window — not a full desktop — from a pooled host pool.
Which AVD delivery method should you use?
- A personal desktop assignment
- A RemoteApp in an application group
- An FSLogix Office container
- A Conditional Access policy
Show answer & explanation
Correct: B — a RemoteApp in an application group. RemoteApp application groups publish individual applications that open in their own windows rather than a full desktop — exactly the single-app delivery described. Desktop application groups, by contrast, deliver a full desktop.
Why not the others: a personal desktop (A) is a full assigned desktop; an FSLogix Office container (C) stores Office profile data; a Conditional Access policy (D) governs sign-in, not app delivery.
Source: Microsoft Learn — Application delivery on Azure Virtual Desktop →You want to dynamically attach applications to session hosts at sign-in from a packaged image, so apps are not baked into the golden image and can be updated independently.
Which AVD feature provides this dynamic application delivery?
- App attach
- Universal Print
- Start VM on Connect
- Multimedia redirection
Show answer & explanation
Correct: A — app attach. App attach dynamically mounts applications from a packaged image to session hosts at sign-in, keeping apps out of the golden image and independently updatable — exactly the dynamic delivery described.
Why not the others: Universal Print (B) is cloud printing; Start VM on Connect (C) powers on hosts on demand; multimedia redirection (D) offloads media rendering. None dynamically attaches applications.
Source: Microsoft Learn — App attach in Azure Virtual Desktop → Further reading: PowerKram — AZ-104 Azure Administrator →You must require multifactor authentication specifically when users connect to Azure Virtual Desktop, evaluated at sign-in based on conditions like risk and device state.
Which capability should you configure?
- FSLogix Cloud Cache
- Azure Compute Gallery
- Microsoft Entra Conditional Access
- RDP Shortpath
Show answer & explanation
Correct: C — Microsoft Entra Conditional Access. Conditional Access policies targeting the Azure Virtual Desktop app enforce controls such as requiring MFA at connection, evaluated on signals like risk and device — exactly the requirement described.
Why not the others: FSLogix Cloud Cache (A) replicates profiles; Azure Compute Gallery (B) stores images; RDP Shortpath (D) optimizes the network transport. None enforces sign-in MFA conditions.
Source: Microsoft Learn — Azure Virtual Desktop identity and authentication →You need to protect AVD session hosts with endpoint detection and response, onboarding them for advanced threat protection and investigation.
Which Microsoft security solution should you implement on the session hosts?
- Azure Bastion
- Microsoft Defender for Endpoint
- Universal Print
- Azure Files
Show answer & explanation
Correct: B — Microsoft Defender for Endpoint. Defender for Endpoint provides endpoint detection and response on AVD session hosts — onboarding, scanning, and investigation — exactly the threat-protection requirement AZ-140 covers under session-host security.
Why not the others: Azure Bastion (A) provides secure administrative access; Universal Print (C) is cloud printing; Azure Files (D) stores profiles and shares. None is an EDR solution.
Source: Microsoft Learn — Azure Virtual Desktop security recommendations → Further reading: PowerKram — AZ-700 Azure Network Engineer →A pooled host pool sees heavy use during business hours and almost none overnight. You want to automatically add and remove session hosts on a schedule and by load to control cost.
Which AVD capability should you configure?
- A Recovery Services vault
- FSLogix application masking
- A Conditional Access policy
- An autoscale scaling plan
Show answer & explanation
Correct: D — an autoscale scaling plan. An AVD scaling plan automatically starts and stops (and deallocates) session hosts on schedules and by load, controlling cost for variable demand — exactly the described need, part of AZ-140’s monitor-and-maintain area.
Why not the others: a Recovery Services vault (A) is for backup; FSLogix application masking (B) hides apps from users; a Conditional Access policy (C) governs sign-in. None autoscales host pools.
Source: Microsoft Learn — Autoscale scaling plans for Azure Virtual Desktop →You want a prebuilt dashboard showing connection health, session performance, and host diagnostics for your Azure Virtual Desktop deployment, backed by Azure Monitor.
Which tool should you use?
- Azure Compute Gallery
- Azure Bastion
- FSLogix Cloud Cache
- Azure Virtual Desktop Insights
Show answer & explanation
Correct: D — Azure Virtual Desktop Insights. AVD Insights is the Azure Monitor-based workbook solution that surfaces connection health, session performance, and host diagnostics in prebuilt dashboards — exactly the monitoring described.
Why not the others: Azure Compute Gallery (A) stores images; Azure Bastion (B) provides secure access; FSLogix Cloud Cache (C) replicates profiles. None is the AVD monitoring dashboard.
Source: Microsoft Learn — Azure Virtual Desktop Insights →Keep going: study & career resources
AZ-140 is a specialty credential built on Azure administration fundamentals. Below it, the administrator route builds the base; alongside it, the networking exam reinforces the heaviest area — and the IT-administrator career track shows where these skills lead.
Deep dive: AZ-140 format, FSLogix, the specialty tier, and study path
Exam format and scoring
AZ-140 delivers roughly 40 to 60 questions in about 100 to 120 minutes, with a passing score of 700 out of 1000 (scaled). It includes multiple choice, multiple response, drag-and-drop, and one or more case studies. It is a hands-on operations exam: expect scenarios about deploying host pools, choosing storage for FSLogix, configuring identity and security, and monitoring at scale. There is no penalty for wrong answers. See the AZ-104 Administrator path →
FSLogix is central
If there is one topic to master for AZ-140, it is FSLogix. Profile containers, Office containers, Cloud Cache, and application masking appear throughout the user-environments area, and the storage decisions behind them (Azure Files versus Azure NetApp Files, performance tiers, and resilience) show up in the heavily weighted infrastructure area. Understanding how profiles roam across pooled multi-session hosts — and how to size and protect that storage — is the difference between passing and failing for many candidates. See the AZ-800 Windows Server path →
Why infrastructure dominates
At 40 to 45%, AVD infrastructure is nearly half the exam — more concentrated than most Azure exams. It spans networking (RDP Shortpath, QoS, Private Link), storage for user data, host-pool and session-host planning and automation (PowerShell, CLI, ARM, and Bicep), and session-host image lifecycle with Azure VM Image Builder and Azure Compute Gallery. Because so much of it is networking, AZ-700 material reinforces this area well. See the AZ-700 Azure Network path →
Realistic study path
Most candidates come to AZ-140 with Azure administration experience (often AZ-104) and need four to eight weeks of AVD-focused study. Work through the official Microsoft Learn AZ-140 learning path with an Azure subscription, build a real deployment (a pooled host pool, FSLogix on Azure Files, a Conditional Access policy, an autoscale scaling plan), then drill scenario questions in PowerKram’s Learn mode and finish with timed Exam-mode runs. Spend the most time on infrastructure and FSLogix, since together they dominate the exam. See the AZ-900 Azure Fundamentals path →
Cost, renewal, and scheduling
List price is $165 USD (specialty tier; regional pricing varies). Like Microsoft associate and expert certifications, the Azure Virtual Desktop Specialty certification is valid for one year and is renewed free through an online assessment on Microsoft Learn during the six months before it expires. The exam is delivered through Pearson VUE at a test center or online with a proctor. Azure Virtual Desktop Specialty certification page →
Career outlook and next steps
AZ-140 is a focused specialty that signals deep Azure Virtual Desktop skill — valuable for organizations running cloud VDI at scale. It builds naturally on AZ-104 (Azure Administrator) and complements AZ-700 (networking) and AZ-800 (Windows Server administration). For desktop and endpoint administrators moving workloads to the cloud, it is a strong, differentiated credential. Career Hub — IT Administrator →
Microsoft AZ-140 (Azure Virtual Desktop Specialty) exam FAQ
What are the AZ-140 skill areas and weights?
Is AZ-140 still active?
What is a specialty certification?
Does AZ-140 have prerequisites?
What is the AZ-140 passing score and format?
Start your free 24-hour AZ-140 practice trial
Full access to the question bank, both study modes, source-linked explanations, and score-by-skill-area. No credit card required.
Start free trial →