AZ-140 Azure Virtual Desktop Practice Questions with Explanations
Free AZ-140 Azure Virtual Desktop practice questions with an explanation for every answer. Covers host pools, session hosts, user profiles with FSLogix, app groups, and monitoring Azure Virtual Desktop.
Questions
Many users should share a set of session hosts, and each user can land on any host. Which host pool type fits?
- Pooled
- Personal
- Dedicated
- Isolated
Developers each need their own VM that keeps installed apps and changes. Which host pool type fits?
- Personal
- Pooled with breadth-first load balancing
- Pooled with depth-first load balancing
- Pooled with a scaling plan
In a personal host pool, which assignment type gives users a VM automatically the first time they connect?
- Automatic
- Direct
- Breadth-first
- Depth-first
Which pooled load balancing method spreads new sessions evenly across all available session hosts?
- Breadth-first
- Depth-first
- Persistent
- Round-trip
To save cost, a pooled host pool should fill one session host up to its limit before using the next. Which method fits?
- Depth-first
- Breadth-first
- Automatic assignment
- Direct assignment
Which host pool setting caps how many users can be on one session host at once?
- Max session limit
- Drain mode
- Validation environment
- Start VM on Connect
Users should see only a few published apps, not a full desktop. Which application group type should you create?
- RemoteApp
- Desktop
- Personal
- Validation
In Azure Virtual Desktop, what does a workspace do?
- Groups application groups into the feed users see
- Stores the user profiles for every session in the host pool
- Runs the session host VMs themselves
- Holds the golden image for the pool
Which AVD components are managed by Microsoft as part of the service?
- The broker, gateway, and web access
- The session host VMs and their OS
- The FSLogix profile share
- The VNet and NSGs for session hosts
Why don't session hosts need inbound ports open from the internet?
- They use reverse connect over outbound 443
- They use inbound RDP on port 3389
- They connect through a site-to-site VPN only
- They expose port 22 to the gateway
Which feature lets RDP traffic use UDP directly for lower latency instead of TCP through the gateway?
- RDP Shortpath
- Start VM on Connect
- Drain mode
- Screen capture protection
Session hosts fail to register, and you suspect blocked outbound URLs. What should you run on a session host?
- The Required URL Check tool
- The FSLogix profile repair tool
- An Azure Advisor cost review
- A new registration token from a different tenant
Which Windows edition lets several users sign in to the same Windows 11 VM at once?
- Windows 11 Enterprise multi-session
- Windows 11 Pro
- Windows 11 Home
- Windows 11 Education single-session
Session hosts run Windows Server. What licensing is needed for users to connect?
- RDS client access licenses (CALs)
- A Microsoft 365 E3 license alone, with no other licensing
- No license of any kind
- A Visual Studio subscription
A company wants to sell access to an app running in AVD to external customers. Which licensing option fits?
- Per-user access pricing
- Microsoft 365 E5 for each customer
- Windows Server CALs for each customer
- A free tier for external users
Users run CAD and 3D design apps in AVD. Which VM series should session hosts use?
- NV-series (GPU)
- B-series (burstable)
- Dv5-series (general purpose)
- Ev5-series (memory optimized)
Where should you store golden images so they can be versioned and replicated to several regions?
- Azure Compute Gallery
- Azure Files
- Azure Container Registry
- A Recovery Services vault
Which service builds custom VM images automatically from a template, including app installs and updates?
- Azure VM Image Builder
- Azure Migrate
- Azure Batch
- Azure Bastion
What must you do to a Windows VM before capturing it as a generalized image?
- Run Sysprep to generalize it
- Join it to the domain and install FSLogix first
- Enable drain mode on it
- Install FSLogix Cloud Cache
Pooled hosts should start in the morning, scale with demand, and shut down at night. What should you configure?
- A scaling plan (autoscale)
- Drain mode on every host
- A personal host pool
- Direct assignment for all users
A scaling plan isn't starting or stopping VMs. What permission is commonly missing?
- The Power On Off Contributor role for the AVD service principal
- The Reader role for each end user
- Owner on the FSLogix storage account
- Global Administrator for the session host
Personal desktops should stay off until a user connects, then start automatically. What should you enable?
- Start VM on Connect
- Drain mode
- Breadth-first load balancing
- RDP Shortpath
A session host needs maintenance, but current users shouldn't be kicked off. What should you do first?
- Turn on drain mode for that host
- Delete the host from the host pool
- Change the pool to depth-first
- Regenerate the registration token
Session hosts must join an AD DS domain. What do they need on the network?
- Line of sight to domain controllers and DNS
- A public IP on each session host
- Inbound port 3389 open from the internet to each host
- A separate VNet with no peering
Which identity options can session hosts use for join?
- AD DS, Entra Domain Services, or Microsoft Entra join
- Only Microsoft Entra Domain Services in the same VNet as the hosts
- Only local workgroup accounts
- Only Azure AD B2C tenants
How long can a host pool registration token be valid?
- Between 1 hour and 27 days
- Exactly 7 days
- Up to 1 year
- It never expires
Which agents are installed on a session host to communicate with the AVD service?
- The Remote Desktop Agent and the Boot Loader
- The MARS backup agent and the Azure File Sync agent
- The Hybrid Runbook Worker only
- The Azure Connected Machine agent only
A new image version is ready. What is the recommended way to update pooled session hosts?
- Deploy new hosts from the image and remove old ones
- Patch each host by hand during business hours while users work
- Restore every host from an old backup
- Change the pool type to personal
Which Microsoft-supported client is the newer unified app for connecting to AVD, Windows 365, and Dev Box?
- Windows App
- Remote Desktop Connection (mstsc) only
- Internet Explorer
- Azure Storage Explorer
Session hosts in a pooled pool must survive an availability zone failure. How should you deploy them?
- Spread them across availability zones
- Put them all in one zone
- Use a single large VM
- Use one availability set in a single zone for all hosts
Admins want new AVD features tested on a subset of hosts before production. What should you configure?
- A validation host pool
- A second workspace with no app groups
- Drain mode on half of the hosts
- Depth-first load balancing
Which Microsoft resource helps estimate how many users fit on each session host by workload type?
- Workload sizing guidelines from Microsoft
- Azure Data Box
- Azure Resource Mover
- FSLogix Cloud Cache
AVD traffic to the service should stay off the public internet where possible. What can you configure?
- Private Link for Azure Virtual Desktop
- A public load balancer in front of hosts
- Inbound RDP on each session host
- A NAT gateway with port forwarding
Session hosts need fast OS disk performance and you don't need the OS disk to persist after reimage. What can you use?
- Ephemeral OS disks
- Standard HDD OS disks
- Ultra Disk as the OS disk
- Azure Files for the OS disk
Which deployment tool can create host pools, session hosts, and app groups repeatably as code?
- Bicep or ARM templates
- Azure Storage Explorer
- FSLogix Profile Container
- The Windows App client
Which RDP property controls whether local drives are redirected into a session?
- drivestoredirect
- targetisaadjoined
- enablerdsaadauth
- use multimon
What is a common reason to deploy session hosts in several regions?
- Lower latency and disaster recovery
- To avoid needing any licenses
- To remove the need for user profiles and licenses
- To skip image management
In Azure Virtual Desktop, you manage the session host VMs, while Microsoft manages the gateway and broker.
Depth-first load balancing spreads users evenly across every session host.
Which built-in role lets users see and connect to the apps in an application group?
- Desktop Virtualization User
- Desktop Virtualization Contributor
- Virtual Machine Contributor
- Reader on the subscription
Users connect to Microsoft Entra-joined session hosts. Which role must they have on the VMs or resource group?
- Virtual Machine User Login
- Virtual Machine Contributor
- Storage Blob Data Reader
- Network Contributor
Help desk staff should manage host pools and session hosts but not change other Azure resources. Which role fits best?
- Desktop Virtualization Host Pool Contributor
- Owner on the subscription that contains the host pools and VNets
- Global Administrator
- User Access Administrator
Users should sign in to AVD with MFA, but not be prompted again inside the session. What should you configure?
- Conditional Access for AVD plus single sign-on
- Security defaults with a shared password for the session hosts
- No MFA for AVD users at all
- Local accounts on each session host
Which RDP property enables Microsoft Entra single sign-on to session hosts?
- enablerdsaadauth:i:1
- targetisaadjoined:i:1
- redirectclipboard:i:0
- drivestoredirect:s:*
Which Conditional Access target app represents Azure Virtual Desktop connections?
- Azure Virtual Desktop (and Windows Cloud Login for SSO)
- Microsoft Graph PowerShell
- Azure Storage
- Microsoft Teams Rooms
Screenshots and screen sharing of sensitive session content must be blocked on the client side. What should you enable?
- Screen capture protection
- RDP Shortpath
- Start VM on Connect
- Breadth-first load balancing
To discourage photos of the screen, every session should show a faint QR code with connection details. What should you enable?
- Watermarking
- Drain mode
- Multimedia redirection
- Cloud Cache
Copying data from the session to the local device must be blocked. Which RDP setting should you change?
- Clipboard redirection
- Session host max limit
- Load balancing method
- Scaling plan schedule
Which VM security type should you use for session hosts to get Secure Boot and a virtual TPM?
- Trusted launch
- Standard security only
- Spot VMs
- Basic security with no TPM
Which Microsoft product provides endpoint detection and response on session hosts?
- Microsoft Defender for Endpoint
- Azure Advisor
- FSLogix Cloud Cache
- Azure Compute Gallery