Pass Your Microsoft AZ-140 Exam Easy!

Microsoft AZ-140 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AZ-140 Premium Bundle

$79.99

Microsoft AZ-140 Premium Bundle

AZ-140 Premium File: 372 Questions & Answers

Last Update: Oct 02, 2026

AZ-140 Training Course: 79 Video Lectures

AZ-140 PDF Study Guide: 430 Pages

AZ-140 Bundle gives you unlimited access to "AZ-140" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft AZ-140 Premium Bundle
Microsoft AZ-140 Premium Bundle

AZ-140 Premium File: 372 Questions & Answers

Last Update: Oct 02, 2026

AZ-140 Training Course: 79 Video Lectures

AZ-140 PDF Study Guide: 430 Pages

$79.99

AZ-140 Bundle gives you unlimited access to "AZ-140" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AZ-140 Practice Test 108

Question 1070

The administrator configured FSLogix Cloud Cache write-back after outage for the business need to protect a connected user's work during a temporary profile storage disconnection. Which observation supports sign-off?

  1. The user can continue via local cache and pending changes synchronize after a provider returns
  2. Selected storage redundancy meets the target recovery requirement and is visible in resource configuration
  3. Free space on the host cache drive increases and logon proceeds after cleanup or sizing
  4. A test account signs into a recovery host using its preserved profile data and accepted access rules

Explanation

Correct Answer

A:

This is the direct functional outcome for FSLogix Cloud Cache write-back after outage: the user can continue via local cache and pending changes synchronize after a provider returns. Cloud Cache buffers changes for configured remote providers. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

B:

That evidence concerns FSLogix container storage redundancy selection, used to match a storage platform's documented zone/region resilience to the profile availability objective. It does not establish whether FSLogix Cloud Cache write-back after outage satisfies the current requirement to protect a connected user's work during a temporary profile storage disconnection.

C:

That evidence concerns Cloud Cache local cache disk-capacity check, used to diagnose sign-in errors when the VM cache volume fills with profile container data. It does not establish whether FSLogix Cloud Cache write-back after outage satisfies the current requirement to protect a connected user's work during a temporary profile storage disconnection.

D:

That evidence concerns Profile storage failover runbook verification, used to rehearse mounting a user's intact profile from a documented replacement storage path after a simulated outage. It does not establish whether FSLogix Cloud Cache write-back after outage satisfies the current requirement to protect a connected user's work during a temporary profile storage disconnection.

Question 1071

A regulated AVD environment must monitor AVD agent health changes on registered session hosts. Which configuration achieves that goal most directly?

  1. Workspace Feed diagnostics
  2. Hostpool Management diagnostic category
  3. Hostpool AgentHealthStatus diagnostics
  4. Hostpool Connection diagnostics to Log Analytics

Explanation

Correct Answer

C:

AgentHealthStatus tracks session-host agent status. This addresses the stated need to monitor AVD agent health changes on registered session hosts without substituting a different control.

Incorrect Answers

A:

Feed diagnostics cover workspace feed operations. This is relevant when the task is to troubleshoot a missing application feed after an app group is published to a workspace; it does not directly meet the requirement to monitor AVD agent health changes on registered session hosts.

B:

Management diagnostics report AVD control-plane operations. This is relevant when the task is to audit changes to hostpool configuration performed during scheduled operations; it does not directly meet the requirement to monitor AVD agent health changes on registered session hosts.

D:

AVD diagnostic settings can forward connection events to Log Analytics. This is relevant when the task is to collect service-side user connection events to investigate failed desktop launches; it does not directly meet the requirement to monitor AVD agent health changes on registered session hosts.

Question 1072

Following approval of Management-group inheritance for tagging governance to apply consistent mandatory tags to desktop resources deployed across several teams' subscriptions, which finding is the most relevant functional validation?

  1. Effective role assignments permit approved version operations but deny unrelated resources
  2. Reserved eligible capacity supports deployment of the approved VM SKU and region
  3. Remaining eligible hosts support the expected user concurrency during the patch window
  4. Policy compliance reports show required classification tags throughout the hierarchy

Explanation

Correct Answer

D:

This is the direct functional outcome for Management-group inheritance for tagging governance: policy compliance reports show required classification tags throughout the hierarchy. Management-group assignments propagate governance to descendants. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Granular RBAC for image publishers, used to allow only approved engineers to create new gallery image versions without broad subscription Owner privileges. It does not establish whether Management-group inheritance for tagging governance satisfies the current requirement to apply consistent mandatory tags to desktop resources deployed across several teams' subscriptions.

B:

That evidence concerns Azure capacity reservation review, used to ensure a scheduled regional rollout can access the planned VM size when supply is constrained. It does not establish whether Management-group inheritance for tagging governance satisfies the current requirement to apply consistent mandatory tags to desktop resources deployed across several teams' subscriptions.

C:

That evidence concerns Availability-capacity buffer for planned maintenance, used to retain enough live pooled host capacity while a maintenance ring is drained. It does not establish whether Management-group inheritance for tagging governance satisfies the current requirement to apply consistent mandatory tags to desktop resources deployed across several teams' subscriptions.

Question 1073

The administrator configured Azure Files storage-account firewall rules for the business need to restrict SMB share endpoints to approved networks even when users have identity permissions. Which observation supports sign-off?

  1. The eligible group has the appropriate SMB Share Contributor access and can reach the share
  2. SMB logons use a supported AES-compatible Kerberos service ticket instead of failed legacy RC4 negotiation
  3. SMB access succeeds from allowed hosts and is denied from disallowed source networks
  4. Signed-in users receive valid Kerberos tickets and mount authorized SMB folders using the approved identity

Explanation

Correct Answer

C:

This is the direct functional outcome for Azure Files storage-account firewall rules: SMB access succeeds from allowed hosts and is denied from disallowed source networks. Storage network controls constrain service reachability. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Azure Files SMB share-level Azure RBAC assignment, used to grant a user group permission to reach a profile SMB share while retaining identity-based authorization. It does not establish whether Azure Files storage-account firewall rules satisfies the current requirement to restrict SMB share endpoints to approved networks even when users have identity permissions.

B:

That evidence concerns Azure Files Kerberos encryption modernization, used to avoid profile authentication failures after the Windows Kerberos RC4-to-AES hardening change. It does not establish whether Azure Files storage-account firewall rules satisfies the current requirement to restrict SMB share endpoints to approved networks even when users have identity permissions.

D:

That evidence concerns Microsoft Entra Kerberos for Azure Files, used to authenticate supported Microsoft Entra joined AVD hosts to a profile SMB share without routine domain-controller line-of-sight. It does not establish whether Azure Files storage-account firewall rules satisfies the current requirement to restrict SMB share endpoints to approved networks even when users have identity permissions.

Question 1074

A support analyst validates Apply recommended system hardening baseline following the change to ensure new desktop session hosts inherit enforced Windows security controls. Which measured result is expected?

  1. The application is installed, launches, and passes user-isolation checks on fresh hosts
  2. Image-based session hosts have the approved Office build and activation configuration
  3. The VM image version remains unchanged while assigned App Attach version changes
  4. Test VM policy and configuration inventory matches the approved hardening baseline

Explanation

Correct Answer

D:

This is the direct functional outcome for Apply recommended system hardening baseline: test VM policy and configuration inventory matches the approved hardening baseline. Hardening in image creation reduces host-by-host drift. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Install line-of-business application in reference VM, used to make a required legacy app available to all hosts launched from the standard image. It does not establish whether Apply recommended system hardening baseline satisfies the current requirement to ensure new desktop session hosts inherit enforced Windows security controls.

B:

That evidence concerns Preinstall supported Microsoft 365 Apps for pooled images, used to deliver a consistent tested Office application baseline before users start multi-session desktops. It does not establish whether Apply recommended system hardening baseline satisfies the current requirement to ensure new desktop session hosts inherit enforced Windows security controls.

C:

That evidence concerns Separate App Attach packages from OS image, used to deliver frequently changing applications without rebuilding the entire session-host image for each release. It does not establish whether Apply recommended system hardening baseline satisfies the current requirement to ensure new desktop session hosts inherit enforced Windows security controls.

Question 1075

For a managed Azure Virtual Desktop service, administrators must distribute immutable session-host image versions across approved target regions rather than storing live profiles in an image. Which setting or service fits?

  1. FSLogix Cloud Cache with two providers
  2. Azure Compute Gallery image versions
  3. SSD provisioned Azure Files share
  4. Azure Backup for Azure Files

Explanation

Correct Answer

B:

Compute Gallery organizes versioned VM image artifacts. This addresses the stated need to distribute immutable session-host image versions across approved target regions rather than storing live profiles in an image without substituting a different control.

Incorrect Answers

A:

Cloud Cache uses local caching across configured providers to improve resilience. This is relevant when the task is to tolerate an intermittent remote storage interruption while users work with locally cached profile data; it does not directly meet the requirement to distribute immutable session-host image versions across approved target regions rather than storing live profiles in an image.

C:

Provisioned SSD files capacity can address demanding profile workloads. This is relevant when the task is to provide predictable high IOPS and low latency for large logon bursts with heavy profile traffic; it does not directly meet the requirement to distribute immutable session-host image versions across approved target regions rather than storing live profiles in an image.

D:

Azure Backup can protect supported Azure Files shares. This is relevant when the task is to protect a supported Azure Files profile share using a managed backup policy and restore points; it does not directly meet the requirement to distribute immutable session-host image versions across approved target regions rather than storing live profiles in an image.

Question 1076

After deploying Pooled host pool for shared multi-session desktops to let many employees consume pooled Windows sessions from a shared collection of session hosts, what direct observation provides the strongest acceptance evidence?

  1. Unrelated users obtain separate sessions on shared pool VMs according to load balancing
  2. Reconnecting user returns to their assigned personal VM rather than a random pooled host
  3. Session counts fill one available host toward the limit before the next host receives new sessions
  4. Reconnect resumes the user's original session even if the host is in drain mode

Explanation

Correct Answer

A:

This is the direct functional outcome for Pooled host pool for shared multi-session desktops: unrelated users obtain separate sessions on shared pool VMs according to load balancing. Pooled pools share hosting capacity across users. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

B:

That evidence concerns Personal host pool for dedicated desktop assignment, used to keep one designated virtual desktop linked to an individual user across reconnects. It does not establish whether Pooled host pool for shared multi-session desktops satisfies the current requirement to let many employees consume pooled Windows sessions from a shared collection of session hosts.

C:

That evidence concerns Depth-first pooled load balancing, used to pack new sessions onto already busy hosts up to an approved session limit to keep other VMs idle. It does not establish whether Pooled host pool for shared multi-session desktops satisfies the current requirement to let many employees consume pooled Windows sessions from a shared collection of session hosts.

D:

That evidence concerns Existing-session reconnection affinity, used to return a user who was disconnected back to their existing pooled session rather than starting a second unrelated session. It does not establish whether Pooled host pool for shared multi-session desktops satisfies the current requirement to let many employees consume pooled Windows sessions from a shared collection of session hosts.

Question 1077

The test plan requires administrators to steer session-host subnet traffic through the organization's approved inspection appliance. Which configuration should they implement?

  1. ExpressRoute private connectivity
  2. Network security group outbound service rule
  3. User-defined route to network virtual appliance
  4. Domain-controller DNS lookup from session-host subnet

Explanation

Correct Answer

C:

UDRs override default paths for selected destinations. This addresses the stated need to steer session-host subnet traffic through the organization's approved inspection appliance without substituting a different control.

Incorrect Answers

A:

ExpressRoute provides private Microsoft network connectivity for hybrid paths. This is relevant when the task is to carry sustained hybrid directory and storage traffic over a dedicated private circuit; it does not directly meet the requirement to steer session-host subnet traffic through the organization's approved inspection appliance.

B:

NSGs filter traffic before guest workloads reach required services. This is relevant when the task is to correct an NSG rule that blocks approved session-host communication with identity or AVD services; it does not directly meet the requirement to steer session-host subnet traffic through the organization's approved inspection appliance.

D:

Domain join depends on reachable domain services and correct DNS. This is relevant when the task is to resolve corporate AD domain services before trying to join hosts to the domain; it does not directly meet the requirement to steer session-host subnet traffic through the organization's approved inspection appliance.

Question 1078

A peer reviewer inspects Teams client package version alignment after it was introduced to prevent a new feature from failing because the host and Windows App versions are incompatible. Which result should be documented?

  1. Authorized Teams call captures speech while unrelated blocked apps cannot access the mic
  2. AVD host CPU spikes during calls while optimization status is absent on affected clients
  3. Version inventory meets the published supported combination and test calls succeed
  4. Pilot browser version passes the extension's acceptance test before fleet-wide rollout

Explanation

Correct Answer

C:

This is the direct functional outcome for Teams client package version alignment: version inventory meets the published supported combination and test calls succeed. VDI media features require compatible releases. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Teams microphone permission policy, used to permit a named communications app to use redirected mic audio only under approved endpoint settings. It does not establish whether Teams client package version alignment satisfies the current requirement to prevent a new feature from failing because the host and Windows App versions are incompatible.

B:

That evidence concerns Session-host CPU observation during Teams call, used to distinguish missing media optimization from a broad Azure networking outage. It does not establish whether Teams client package version alignment satisfies the current requirement to prevent a new feature from failing because the host and Windows App versions are incompatible.

D:

That evidence concerns Browser update ring validation, used to avoid breaking a line-of-business browser extension in all AVD hosts with an untested upgrade. It does not establish whether Teams client package version alignment satisfies the current requirement to prevent a new feature from failing because the host and Windows App versions are incompatible.

Question 1079

Following approval of Profile-size trend measurement to estimate profile storage growth before another cohort begins using the pooled host pool, which finding is the most relevant functional validation?

  1. Transaction-rate telemetry reflects the observed SMB operation burst
  2. The share stays below quota under projected user-profile growth and accepted headroom
  3. A sampled profile-size distribution supports the aggregate capacity forecast
  4. Each container's maximum configured size is enforced and users receive capacity warnings when relevant

Explanation

Correct Answer

C:

This is the direct functional outcome for Profile-size trend measurement: a sampled profile-size distribution supports the aggregate capacity forecast. Real profile sizes determine storage requirements better than a fixed guess. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Azure Files transactions metric, used to detect a workload whose file operation volume is significantly higher than planned. It does not establish whether Profile-size trend measurement satisfies the current requirement to estimate profile storage growth before another cohort begins using the pooled host pool.

B:

That evidence concerns Azure Files share-capacity forecasting, used to prevent FSLogix profiles from failing to grow when a share reaches its quota. It does not establish whether Profile-size trend measurement satisfies the current requirement to estimate profile storage growth before another cohort begins using the pooled host pool.

D:

That evidence concerns Profile container VHDX sizing policy, used to limit unusually large user profile disks without deleting legitimate profile content unexpectedly. It does not establish whether Profile-size trend measurement satisfies the current requirement to estimate profile storage growth before another cohort begins using the pooled host pool.

Question 1080

An Azure Virtual Desktop engineering team needs to grant a specialized automation only the precise hostpool actions it needs. Which specific configuration is the most direct fit?

  1. RBAC scope inheritance inspection
  2. Desktop Virtualization Application Group Contributor
  3. Custom least-privilege RBAC role
  4. Reader role on resource group

Explanation

Correct Answer

C:

Custom roles narrow operations beyond broad built-in roles. This addresses the stated need to grant a specialized automation only the precise hostpool actions it needs without substituting a different control.

Incorrect Answers

A:

Azure RBAC roles flow downward through scopes. This is relevant when the task is to explain why a user has effective permissions on a hostpool from a parent subscription assignment; it does not directly meet the requirement to grant a specialized automation only the precise hostpool actions it needs.

B:

App-group contributor is scoped to AVD application group management. This is relevant when the task is to let an apps administrator manage published application groups but not the underlying VM fleet; it does not directly meet the requirement to grant a specialized automation only the precise hostpool actions it needs.

D:

Reader grants control-plane observation only. This is relevant when the task is to let an auditor inspect hostpool configurations without authorizing destructive management changes; it does not directly meet the requirement to grant a specialized automation only the precise hostpool actions it needs.


Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

AZ-140 Premium File

Premium File
AZ-140 Premium File
372 Q&A
$76.99$69.99

AZ-140 Training Video Course

Training Course
AZ-140 Training Video Course
79 Lectures
$27.49$24.99

AZ-140 Study Guide

Study Guide
AZ-140 Study Guide
430 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.