Pass Your Microsoft AZ-140 Exam Easy!

Rule sets use user and group assignments to target masking. This is relevant when the task is to diagnose a masking rule that doesn't apply because an employee isn't in the expected identity group; it does not directly meet the requirement to identify why one user sees a temporary profile after moving to a new pooled session host.

Application masking dynamically hides applications based on rule assignments. This is relevant when the task is to show a licensed application only to entitled users on the same pooled Windows image; it does not directly meet the requirement to identify why one user sees a temporary profile after moving to a new pooled session host.

Consistent supported agent versions reduce profile troubleshooting noise. This is relevant when the task is to confirm guest FSLogix build is supported and compatible with the current Windows image before troubleshooting advanced settings; it does not directly meet the requirement to identify why one user sees a temporary profile after moving to a new pooled session host.

That evidence concerns Browser policy management on session host, used to enforce approved enterprise browser extension and home page settings in a pooled desktop. It does not establish whether Teams VDI media optimization satisfies the current requirement to offload supported Microsoft Teams audio and video processing to a compatible endpoint rather than render everything on a shared host.

That evidence concerns Remote Desktop WebRTC redirector component, used to ensure compatible Teams/media redirection features have required host-side runtime components. It does not establish whether Teams VDI media optimization satisfies the current requirement to offload supported Microsoft Teams audio and video processing to a compatible endpoint rather than render everything on a shared host.

That evidence concerns Multimedia redirection for web video, used to reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM. It does not establish whether Teams VDI media optimization satisfies the current requirement to offload supported Microsoft Teams audio and video processing to a compatible endpoint rather than render everything on a shared host.

That evidence concerns Defender exclusion change review, used to prevent an unjustified broad antivirus exclusion from weakening FSLogix and host protection. It does not establish whether Windows security audit log collection satisfies the current requirement to forward guest OS audit events to the organization's security monitoring platform.

That evidence concerns Microsoft Defender Antivirus signature updates, used to keep the malware detection engine on the approved current signature baseline across a pooled VM fleet. It does not establish whether Windows security audit log collection satisfies the current requirement to forward guest OS audit events to the organization's security monitoring platform.

That evidence concerns Microsoft Defender Antivirus real-time protection, used to prevent known malware from executing on session-host Windows guest VMs during user sessions. It does not establish whether Windows security audit log collection satisfies the current requirement to forward guest OS audit events to the organization's security monitoring platform.

That evidence concerns RDP transport connection information, used to distinguish whether a user's live connection uses TCP, direct UDP or relayed UDP. It does not establish whether RDP Multipath connection reliability view satisfies the current requirement to investigate whether redundant paths are improving continuity for a mobile user.

That evidence concerns TCP fallback after UDP restriction, used to retain remote access in a network where all permitted UDP transports are blocked. It does not establish whether RDP Multipath connection reliability view satisfies the current requirement to investigate whether redundant paths are improving continuity for a mobile user.

That evidence concerns Transport-port and NAT capacity planning, used to prevent port exhaustion when thousands of simultaneous Multipath sessions use UDP and TCP paths. It does not establish whether RDP Multipath connection reliability view satisfies the current requirement to investigate whether redundant paths are improving continuity for a mobile user.

That evidence concerns SMB 3 encryption in transit, used to require encrypted file share data in flight between session host and Azure Files. It does not establish whether Azure Files share soft delete satisfies the current requirement to recover a mistakenly deleted entire SMB file share within its configured retention interval.

That evidence concerns Customer-managed key for storage account, used to meet a policy requiring an organization-controlled key lifecycle for encrypted profile data. It does not establish whether Azure Files share soft delete satisfies the current requirement to recover a mistakenly deleted entire SMB file share within its configured retention interval.

That evidence concerns Azure Files snapshots, used to retain point-in-time versions of a share for an operational file-level rollback. It does not establish whether Azure Files share soft delete satisfies the current requirement to recover a mistakenly deleted entire SMB file share within its configured retention interval.

Pooled pools share hosting capacity across users. This is relevant when the task is to let many employees consume pooled Windows sessions from a shared collection of session hosts; it does not directly meet the requirement to spread incoming sessions across the least-loaded eligible hosts to favor capacity distribution.

Personal host pools maintain persistent user-to-VM association. This is relevant when the task is to keep one designated virtual desktop linked to an individual user across reconnects; it does not directly meet the requirement to spread incoming sessions across the least-loaded eligible hosts to favor capacity distribution.

Automatic assignment chooses an unallocated personal session host. This is relevant when the task is to give newly entitled users an unused personal VM on initial connection without manual per-user binding; it does not directly meet the requirement to spread incoming sessions across the least-loaded eligible hosts to favor capacity distribution.

NetApp snapshots capture prior volume contents. This is relevant when the task is to preserve point-in-time volume snapshots under an approved profile recovery schedule; it does not directly meet the requirement to present a managed SMB path to domain-joined AVD session hosts for shared profiles.

Cloud Cache supports multiple storage providers for resilience. This is relevant when the task is to test use of a second Cloud Cache profile backend while the first is intentionally unavailable; it does not directly meet the requirement to present a managed SMB path to domain-joined AVD session hosts for shared profiles.

NetApp volume quota constrains the profile data that can be stored. This is relevant when the task is to avoid a profile-volume capacity overrun as more users join the environment; it does not directly meet the requirement to present a managed SMB path to domain-joined AVD session hosts for shared profiles.

That evidence concerns Image Builder failure log inspection, used to identify a failed provisioner rather than silently promoting an incomplete golden image. It does not establish whether Image Builder managed identity permission satisfies the current requirement to let the build service write its finished image to a private gallery without broad Owner permissions.

That evidence concerns Image-version release notes and change log, used to trace which app and OS patches were introduced between two host image versions. It does not establish whether Image Builder managed identity permission satisfies the current requirement to let the build service write its finished image to a private gallery without broad Owner permissions.

That evidence concerns Image Builder customizer script, used to install a required security agent into the image as an audited build stage. It does not establish whether Image Builder managed identity permission satisfies the current requirement to let the build service write its finished image to a private gallery without broad Owner permissions.

That evidence concerns DR runbook with ordered dependency recovery, used to bring back identity, profile storage, session hosts and AVD application delivery in a tested order. It does not establish whether Cross-region image replication to Compute Gallery satisfies the current requirement to ensure approved session host image artifacts are available in the disaster recovery region before a primary region failure.

That evidence concerns Disaster recovery failback procedure, used to safely return staff to primary-region desktops after services recover without losing recent profile changes. It does not establish whether Cross-region image replication to Compute Gallery satisfies the current requirement to ensure approved session host image artifacts are available in the disaster recovery region before a primary region failure.

That evidence concerns Secondary-region AVD hostpool readiness, used to provide an alternative region with preprovisioned session capacity for a regional desktop outage. It does not establish whether Cross-region image replication to Compute Gallery satisfies the current requirement to ensure approved session host image artifacts are available in the disaster recovery region before a primary region failure.

Deployment scope is selected during hostpool creation and cannot be changed later. This is relevant when the task is to select geographical or regional host pool deployment scope as appropriate before creating a new host pool; it does not directly meet the requirement to enforce shared desktop governance across several subscriptions without copying each policy manually.

Subscriptions are billing, quota and administrative boundaries. This is relevant when the task is to isolate finance chargeback and policy boundaries for a regulated virtual desktop environment; it does not directly meet the requirement to enforce shared desktop governance across several subscriptions without copying each policy manually.

Application groups are bound to a host pool for delivery. This is relevant when the task is to keep several desktop/application entitlements linked to the intended collection of session hosts; it does not directly meet the requirement to enforce shared desktop governance across several subscriptions without copying each policy manually.

That evidence concerns Microsoft Entra SSO RDP hostpool property, used to provide token-based Windows sign-in without asking the user for a second password after authenticating the AVD feed. It does not establish whether Microsoft Entra Kerberos server object for hybrid SSO satisfies the current requirement to support the documented hybrid authentication flow when an on-premises AD DS environment is part of Entra SSO.

That evidence concerns Windows Cloud Login Entra app enablement, used to allow the required Microsoft Entra authentication protocol for remote Windows sign-in. It does not establish whether Microsoft Entra Kerberos server object for hybrid SSO satisfies the current requirement to support the documented hybrid authentication flow when an on-premises AD DS environment is part of Entra SSO.

That evidence concerns SSO sign-in logs for AVD and Cloud Login, used to determine which of the two Entra authentication stages rejected a connection. It does not establish whether Microsoft Entra Kerberos server object for hybrid SSO satisfies the current requirement to support the documented hybrid authentication flow when an on-premises AD DS environment is part of Entra SSO.