10 free Microsoft AZ-140 practice questions with the correct answer and a full explanation for each, taken from the CertStash pack of 363 questions. Work through them, then open each answer to check your reasoning.
Get all 363 questions (US$39) · Download these 10 as a PDF
Question 1
You have an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure virtual network named VNET1.
To VNET1, you deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named litwareinc.com.
To VNET1, you plan to deploy a Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can deploy Windows 10 Enterprise session hosts to Pool1.
What should you do first?
Show answer and explanation
Correct answer: B. Modify the DNS settings of VNET1.
Before deploying Azure Virtual Desktop session hosts to a domain-joined environment with Azure AD DS, the virtual network's DNS settings must be configured to point to the Azure AD DS managed domain's DNS servers. This ensures that VMs in VNET1 can properly resolve the litwareinc.com domain and join the domain. Modifying VNET1's DNS settings is the prerequisite step that must be completed first.
Why the other options are wrong
- A. Modifying the litwareinc.com DNS zone may be needed later but is not the first step; DNS resolution must be configured at the network level first.
- C. Adding a custom domain to contoso.com is unnecessary since litwareinc.com is already the managed domain being used.
- D. Azure AD Connect cloud sync is not required for Azure AD DS domain-joined deployments and is not a prerequisite for AVD host pool deployment.
Question 2
You have the devices shown in the following table.
You plan to deploy Azure Virtual Desktop for client access to remove virtualized apps.
Which devices support the Remote Desktop client?
Show answer and explanation
Correct answer: B. Device1 and Device3 only
The Remote Desktop client for Azure Virtual Desktop is supported on Windows 10 and Windows 11, including Windows 10 IoT Enterprise, so Device1 (Windows 10 Home) and Device3 (Windows 10 IoT Enterprise) can connect. Windows 8.1 is not a supported operating system for the Windows Desktop client used with Azure Virtual Desktop, so Device2 is excluded. Device2 would need to be upgraded to a supported Windows client release before it could be used for access to the virtualized apps.
Why the other options are wrong
- A. Device2 runs Windows 8.1 Professional, which is not a supported platform for the Azure Virtual Desktop Remote Desktop client.
- C. Including Device2 is incorrect because Windows 8.1 is outside the supported client operating system list.
- D. Device3 running Windows 10 IoT Enterprise is supported and must be included with Device1.
Question 3
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
You plan to use Azure Virtual Desktop host pools with load balancing and autoscaling.
You need to recommend a host pool design that meets the requirements. The solution must minimize costs.
What is the minimum number of host pools you should recommend?
Show answer and explanation
Correct answer: C. 3
Research needs single-session desktops, which cannot be delivered from the same host pool as multi-session desktops, so that is one pool. Engineering needs GPU-backed mult-ession hosts, and running the remaining non-GPU workloads on those more expensive GPU VMs would not minimize costs, so Engineering gets its own pool. IT and Finance both need non-GPU multi-session capacity, and Finance's RemoteApp requirement is met by publishing a RemoteApp application group from that same pool, giving a total of three host pools.
Why the other options are wrong
- A. One host pool cannot deliver both the single-session desktops that Research needs and the multi-session desktops the other departments need.
- B. Two host pools would force the non-GPU workloads onto the costly GPU hosts or mix session types, so it fails either the cost or the technical requirement.
- D. A fourth pool is unnecessary because Finance's RemoteApp resources can be published as an application group from the same non-GPU multi-session pool used by IT.
Question 4
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
• A VPN connection to the main office
• A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.
Users in the branch office report slow responses and connection errors when they attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
Show answer and explanation
Correct answer: B. Rule3
Azure Virtual Desktop users connect to Azure resources via HTTP/HTTPS traffic destined for Azure public IP addresses. Rule3 specifically handles HTTP/HTTPS traffic to all Azure and Microsoft 365 public IP addresses, which includes the Azure Virtual Desktop service endpoints. Since users are experiencing slow responses and connection errors when accessing Azure Virtual Desktop, the bottleneck is in the traffic class that handles Azur-ound HTTP/HTTPS connections. Increasing the bandwidth allocation for Rule3 directly addresses this traffic type and will improve performance for Azure Virtual Desktop resources.
Why the other options are wrong
- A. Rule2 handles site-to-site VPN traffic to Azure infrastructure, not the HTTP/HTTPS user traffic that Azure Virtual Desktop clients use to connect to the service.
- C. Rule4 handles non-Microsoft internet traffic, which is unrelated to Azure Virtual Desktop connectivity issues.
- D. Rule1 handles VPN traffic to the main office, which is not the path used for Azure Virtual Desktop connections from branch office users.
Question 5
You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual machines.
You create a Azure Virtual Desktop host pool.
You need to ensure that you can add the virtual machines to the host pool.
What should you do first?
Show answer and explanation
Correct answer: B. Generate a registration key.
Before adding virtual machines to an Azure Virtual Desktop host pool, you must generate a registration key from the host pool. This registration key is required by the Remote Desktop agent on each VM to authenticate and register with the host pool. Generating the registration key is the first prerequisite step in the process of adding existing VMs to the pool.
Why the other options are wrong
- A. Registering the Microsoft.DesktopVirtualization provider is typically already done as part of subscription setup and is not specific to adding VMs to a host pool.
- C. The Invoke-AzVMRunCommand cmdlet is used to execute commands on VMs but is not the first step in adding VMs to a host pool.
- D. Creating a role assignment may be needed for permissions but is not the first action required to add VMs to the host pool.
Question 6
You are designing an Azure Virtual Desktop deployment.
You identify the network latency between the locations where users reside and the planned deployment.
What should you use to identify the best Azure region to deploy the host pool?
Show answer and explanation
Correct answer: B. Azure Virtual Desktop Experience Estimator
The Azure Virtual Desktop Experience Estimator is a tool specifically designed to assess network latency and quality between user locations and Azure regions, helping determine the optimal region for AVD deployment. It measures connection quality metrics and provides recommendations based on actual network conditions between users and Azure datacenters.
Why the other options are wrong
- A. Azure Traffic Manager is for routing traffic between endpoints, not for assessing latency for region selection in AVD deployments.
- C. Azure Monitor for Azure Virtual Desktop is used for monitoring existing AVD deployments, not for selecting the initial deployment region.
- D. Azure Advisor provides general cost and performance recommendations but is not specifically designed for network latency assessment between user locations and Azure regions.
Question 7
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
• Image1 must replicate in the South India region.
• The session hosts in Pool2 must be based on Image1.
• Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
Show answer and explanation
Correct answer: C. From SIG1, update the replication for the latest image version of Image1.
When using a Shared Image Gallery (SIG) for Azure Virtual Desktop, you can configure replication targets directly within SIG1 to replicate the image definition and its versions to multiple regions including South India. This approach allows Image1 to exist in both East US and South India, and any future updates to Image1 will automatically replicate to all configured regions. This is the native, built-in feature designed for this exact scenario.
Why the other options are wrong
- A. Creating a separate SIG in each region defeats the purpose of using a single gallery and creates management complexity; SIG is designed to handle multi-region replication natively.
- B. Storing VM images in blob storage or shared folders lacks the versioning, replication, and management features of Shared Image Gallery.
- D. GRS replication for storage accounts is for FSLogix profile containers, not for VM image distribution, and VHD files should not be copied to profile containers.
Question 8
Your company has 60,000 users.
You plan to deploy Azure Virtual Desktop.
You need to recommend a storage solution for the FSLogix profile containers. The solution must provide the highest possible IOPS and the lowest latency desktop experience.
What should you recommend?
Show answer and explanation
Correct answer: B. Azure NetApp Files
Azure NetApp Files provides the highest IOPS and lowest latency for FSLogix profile containers due to its enterprise-grade NFS/SMB performance characteristics, su-illisecond latencies, and ability to handle high concurrent user loads. For large deployments with 60,000 users requiring optimal desktop experience, Azure NetApp Files is the recommended storage solution.
Why the other options are wrong
- A. Azure Data Lake Storage is optimized for big data analytics, not for FSLogix profile containers or desktop virtualization workloads.
- C. Azure Blob Storage Premium may improve performance over standard but does not provide the IOPS and latency characteristics needed for 60,000 concurrent users.
- D. Azure Files Standard does not provide sufficient IOPS or low latency for large-scale FSLogix deployments and would result in poor user experience.
Question 9
Your company has a single office and has 40 employees.
You are planning an Azure Virtual Desktop deployment. The estimated user workloads are shown in the following table.
Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office.
Approximately how much bandwidth is needed between the office and Azure to support the planned workloads?
Show answer and explanation
Correct answer: B. 55 Mbps
Users who work from home do not build a VPN tunnel to the office, so their sessions go straight to Azure and never consume the office-to-Azure link. The office connection therefore only has to carry the half of each workload type that works on site: 10 light users at 1.5 Mbps equals 15 Mbps, 5 medium users at 3 Mbps equals 15 Mbps, and 5 heavy users at 5 Mbps equals 25 Mbps. Adding those figures gives approximately 55 Mbps.
Why the other options are wrong
- A. 9.5 Mbps is just the sum of one session of each workload type and ignores the number of concurrent office users.
- C. 110 Mbps sizes the link for all 40 users, including the home workers who bypass the office connection entirely.
- D. 220 Mbps is double the all-user figure and has no basis in the workload table.
Question 10
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the domain controllers shown in the following table.
The DNS servers are configured to forward requests to an external DNS service.
You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.
You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.
You need to configure DNS to meet the following requirements:
• Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.
• Ensure that azure Virtual Desktop remains operational if a DNS server fails.
• Minimize administrative effort.
What should you configure?
Show answer and explanation
Correct answer: A. the DNS settings of VNET2 to use Server2 and Server1
Server1 Setting custom DNS servers on VNET2 makes every session host in the virtual network inherit the settings through DHCP, which is the lowest administrative effort. Listing Server2 first keeps name resolution local to Azure, and Server1 provides a second domain controller and DNS server so resolution continues if one server fails. Because both servers are domain DNS servers that forward externally, users can resolve on-premises servers, Azure resources, and internet names.
Why the other options are wrong
- B. Azure DNS cannot resolve the on-premises Active Directory namespace that the domain-joined session hosts depend on.
- C. Configuring DNS individually on each virtual machine increases administrative effort and must be repeated for every new session host.
- D. Pointing the virtual machines at Azure DNS leaves them unable to resolve o-remises servers and domain records.
That was 10 of 363.
The full Microsoft AZ-140 pack has all 363 questions, each with the answer, the explanation and why the other options are wrong, plus a questions-only copy for timed runs. US$39, paid once, with free monthly updates and a pass-or-your-money-back guarantee.