Pass Your Microsoft AZ-140 Exam Easy!

Microsoft AZ-140 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AZ-140 Premium Bundle

$79.99

Microsoft AZ-140 Premium Bundle

AZ-140 Premium File: 372 Questions & Answers

Last Update: Oct 02, 2026

AZ-140 Training Course: 79 Video Lectures

AZ-140 PDF Study Guide: 430 Pages

AZ-140 Bundle gives you unlimited access to "AZ-140" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft AZ-140 Premium Bundle
Microsoft AZ-140 Premium Bundle

AZ-140 Premium File: 372 Questions & Answers

Last Update: Oct 02, 2026

AZ-140 Training Course: 79 Video Lectures

AZ-140 PDF Study Guide: 430 Pages

$79.99

AZ-140 Bundle gives you unlimited access to "AZ-140" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AZ-140 Practice Test 91

Question 900

A virtual desktop administrator receives a requirement to block personal consumer OneDrive accounts on regulated pooled desktops while allowing organizational accounts. What should they select?

  1. OneDrive enterprise sign-in restriction
  2. OneDrive Files On-Demand
  3. OneDrive Known Folder Move policy
  4. OneDrive per-machine installation

Explanation

Correct Answer

A:

Sync client policies can constrain permitted identity types. This addresses the stated need to block personal consumer OneDrive accounts on regulated pooled desktops while allowing organizational accounts without substituting a different control.

Incorrect Answers

B:

Files On-Demand reduces unnecessary local synchronization. This is relevant when the task is to reduce local VHDX capacity pressure by hydrating files only when a user opens cloud-backed content; it does not directly meet the requirement to block personal consumer OneDrive accounts on regulated pooled desktops while allowing organizational accounts.

C:

Known Folder Move moves selected profile folders into OneDrive. This is relevant when the task is to redirect approved Desktop/Documents/Pictures content to each user's OneDrive cloud storage; it does not directly meet the requirement to block personal consumer OneDrive accounts on regulated pooled desktops while allowing organizational accounts.

D:

Per-machine setup is a common multi-user deployment model. This is relevant when the task is to ensure OneDrive is available to each user of a pooled Windows session host without relying on per-user manual installs; it does not directly meet the requirement to block personal consumer OneDrive accounts on regulated pooled desktops while allowing organizational accounts.

Question 901

At an operational readiness review, a team is required to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected. Which technical choice is most suitable?

  1. Peak-phase capacity schedule
  2. Depth-first autoscale load balancing coordination
  3. Autoscale phase timezone verification
  4. Autoscale session-aware deallocation test

Explanation

Correct Answer

C:

Autoscale phase times depend on schedule time zone. This addresses the stated need to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected without substituting a different control.

Incorrect Answers

A:

Peak phase controls planned host availability. This is relevant when the task is to sustain sufficient available VM capacity during expected working-hour utilization peaks; it does not directly meet the requirement to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected.

B:

Depth-first aids consolidation under autoscale. This is relevant when the task is to pack active user sessions onto fewer pooled hosts when scaling down under a cost optimization objective; it does not directly meet the requirement to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected.

D:

Session-aware controls protect users during deallocation. This is relevant when the task is to ensure scaling doesn't shut down a host with active users contrary to the approved schedule settings; it does not directly meet the requirement to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected.

Question 902

An Azure Virtual Desktop engineering team needs to make a package image reachable to every session host in the allowed pool through shared file storage. Which specific configuration is the most direct fit?

  1. MSIX package image preparation
  2. App Attach Azure Files UNC storage path
  3. App Attach package version upgrade
  4. App Attach same-region package planning

Explanation

Correct Answer

B:

Package-image access requires reachable shared storage. This addresses the stated need to make a package image reachable to every session host in the allowed pool through shared file storage without substituting a different control.

Incorrect Answers

A:

App Attach mounts supported packaged application images. This is relevant when the task is to create a supported disk-image form of an existing signed MSIX package for App Attach use; it does not directly meet the requirement to make a package image reachable to every session host in the allowed pool through shared file storage.

C:

Package version replacement is independent from host image lifecycle. This is relevant when the task is to release a new version of one app without rebuilding golden images across the pool; it does not directly meet the requirement to make a package image reachable to every session host in the allowed pool through shared file storage.

D:

App Attach delivery observes supported regional requirements. This is relevant when the task is to ensure a package can be assigned to session hosts in the supported Azure region required by that package and pool; it does not directly meet the requirement to make a package image reachable to every session host in the allowed pool through shared file storage.

Question 903

A platform engineering group is evaluating the best supported way to store thousands of pooled-user FSLogix VHDX profile containers on shared SMB storage. Which option addresses that need?

  1. Azure Backup for Azure Files
  2. FSLogix Profile Container VHDX on SMB
  3. FSLogix Cloud Cache with two providers
  4. Azure Files SMB share for roaming profiles

Explanation

Correct Answer

D:

Azure Files supplies managed SMB storage suitable for FSLogix profiles. This addresses the stated need to store thousands of pooled-user FSLogix VHDX profile containers on shared SMB storage without substituting a different control.

Incorrect Answers

A:

Azure Backup can protect supported Azure Files shares. This is relevant when the task is to protect a supported Azure Files profile share using a managed backup policy and restore points; it does not directly meet the requirement to store thousands of pooled-user FSLogix VHDX profile containers on shared SMB storage.

B:

Profile Container redirects the Windows profile into a portable disk file. This is relevant when the task is to roam the whole Windows user profile instead of rebuilding a local profile each login; it does not directly meet the requirement to store thousands of pooled-user FSLogix VHDX profile containers on shared SMB storage.

C:

Cloud Cache uses local caching across configured providers to improve resilience. This is relevant when the task is to tolerate an intermittent remote storage interruption while users work with locally cached profile data; it does not directly meet the requirement to store thousands of pooled-user FSLogix VHDX profile containers on shared SMB storage.

Question 904

A desktop service owner wants to use a managed AD-compatible domain for a supported legacy LDAP/Kerberos application requirement. Which change provides the requested capability?

  1. Microsoft Entra hybrid joined hosts
  2. Microsoft Entra device registration status audit
  3. Domain controller reachability for AD hosts
  4. Microsoft Entra Domain Services managed domain

Explanation

Correct Answer

D:

Entra Domain Services supplies managed domain functionality. This addresses the stated need to use a managed AD-compatible domain for a supported legacy LDAP/Kerberos application requirement without substituting a different control.

Incorrect Answers

A:

Hybrid join preserves both device identities. This is relevant when the task is to retain local AD DS join while registering devices in Microsoft Entra for hybrid policies; it does not directly meet the requirement to use a managed AD-compatible domain for a supported legacy LDAP/Kerberos application requirement.

B:

Registered and joined device states are distinct. This is relevant when the task is to identify a host registered in Entra but not actually joined as required by the deployment design; it does not directly meet the requirement to use a managed AD-compatible domain for a supported legacy LDAP/Kerberos application requirement.

C:

Domain connectivity is required for traditional AD-backed sign-in. This is relevant when the task is to prevent Windows login failures when domain-joined session hosts cannot reach a required private controller; it does not directly meet the requirement to use a managed AD-compatible domain for a supported legacy LDAP/Kerberos application requirement.

Question 905

The administrator configured Hybrid public discovery with private session transport for the business need to leave initial discovery public but keep feed and session connections private to meet a scoped requirement. Which observation supports sign-off?

  1. The new workspace has a feed private endpoint and private DNS correctly resolves the feed endpoint
  2. Each authorized host pool has its own connection subresource endpoint
  3. Private feed and connection endpoints work without a global discovery private endpoint
  4. Successful authenticated discovery, subscription and session connect use only intended private routes

Explanation

Correct Answer

C:

This is the direct functional outcome for Hybrid public discovery with private session transport: private feed and connection endpoints work without a global discovery private endpoint. A partial Private Link pattern can use public discovery and private remaining phases. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns Private-link per-workspace feed coverage, used to ensure a new workspace's feeds remain private after workspace expansion. It does not establish whether Hybrid public discovery with private session transport satisfies the current requirement to leave initial discovery public but keep feed and session connections private to meet a scoped requirement.

B:

That evidence concerns Private-link per-hostpool connection coverage, used to avoid missing session traffic when a second host pool is added to a private AVD environment. It does not establish whether Hybrid public discovery with private session transport satisfies the current requirement to leave initial discovery public but keep feed and session connections private to meet a scoped requirement.

D:

That evidence concerns Private-only AVD end-to-end connectivity test, used to demonstrate that feed discovery, feed subscription and session launch remain functional without an approved public path. It does not establish whether Hybrid public discovery with private session transport satisfies the current requirement to leave initial discovery public but keep feed and session connections private to meet a scoped requirement.

Question 906

A production desktop deployment has the requirement to prioritize direct UDP transport across routed corporate connectivity to a session host. Which action should the administrator choose?

  1. RDP Shortpath with STUN discovery
  2. RDP Multipath connection reliability view
  3. RDP Shortpath for managed networks
  4. TCP fallback after UDP restriction

Explanation

Correct Answer

C:

Managed Shortpath uses a reachable private-network UDP path. This addresses the stated need to prioritize direct UDP transport across routed corporate connectivity to a session host without substituting a different control.

Incorrect Answers

A:

STUN enables discovery of a usable direct transport across NAT. This is relevant when the task is to use direct public-network UDP where NAT traversal succeeds; it does not directly meet the requirement to prioritize direct UDP transport across routed corporate connectivity to a session host.

B:

Azure Virtual Desktop Insights can expose connection reliability data for supported sessions. This is relevant when the task is to investigate whether redundant paths are improving continuity for a mobile user; it does not directly meet the requirement to prioritize direct UDP transport across routed corporate connectivity to a session host.

D:

Reverse-connect TCP provides compatibility when UDP cannot be established. This is relevant when the task is to retain remote access in a network where all permitted UDP transports are blocked; it does not directly meet the requirement to prioritize direct UDP transport across routed corporate connectivity to a session host.

Question 907

An Azure Virtual Desktop engineering team needs to reduce the risk that one Azure datacenter-zone failure removes all hosts from a critical pool. Which specific configuration is the most direct fit?

  1. Session-host per-user application resource measurement
  2. Region-near-users placement strategy
  3. Memory sizing for concurrent sessions
  4. VM availability-zone distribution

Explanation

Correct Answer

D:

Zone distribution reduces correlated datacenter-failure exposure. This addresses the stated need to reduce the risk that one Azure datacenter-zone failure removes all hosts from a critical pool without substituting a different control.

Incorrect Answers

A:

Workload profiling identifies distinct resource footprints. This is relevant when the task is to estimate whether a browser-heavy cohort can share hosts with CPU-heavy analytics users; it does not directly meet the requirement to reduce the risk that one Azure datacenter-zone failure removes all hosts from a critical pool.

B:

Geographic placement affects interactive desktop latency. This is relevant when the task is to lower network delay for a large remote workforce by hosting desktops closer to their expected access region; it does not directly meet the requirement to reduce the risk that one Azure datacenter-zone failure removes all hosts from a critical pool.

C:

Pooled session memory needs grow with active session processes. This is relevant when the task is to prevent a shared host from paging during simultaneous office application use; it does not directly meet the requirement to reduce the risk that one Azure datacenter-zone failure removes all hosts from a critical pool.

Question 908

During an architecture review, a platform engineer must reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM. Which option meets that requirement most directly?

  1. Remote Desktop WebRTC redirector component
  2. Group Policy Object for AD joined session hosts
  3. Multimedia redirection for web video
  4. Teams VDI media optimization

Explanation

Correct Answer

C:

Multimedia redirection offloads video playback. This addresses the stated need to reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM without substituting a different control.

Incorrect Answers

A:

The host needs matching redirection components for supported Teams configurations. This is relevant when the task is to ensure compatible Teams/media redirection features have required host-side runtime components; it does not directly meet the requirement to reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM.

B:

Linked GPOs enforce Windows guest configuration on domain-joined machines. This is relevant when the task is to deploy approved remote desktop experience settings to all session hosts in one organizational unit; it does not directly meet the requirement to reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM.

D:

Teams VDI optimization uses coordinated client and host support. This is relevant when the task is to offload supported Microsoft Teams audio and video processing to a compatible endpoint rather than render everything on a shared host; it does not directly meet the requirement to reduce session-host CPU use by decoding supported browser video on the local client instead of on the remote VM.

Question 909

For a managed Azure Virtual Desktop service, administrators must sustain sufficient available VM capacity during expected working-hour utilization peaks. Which setting or service fits?

  1. Autoscale session-aware deallocation test
  2. Pooled hostpool autoscale scaling plan
  3. Autoscale phase timezone verification
  4. Peak-phase capacity schedule

Explanation

Correct Answer

D:

Peak phase controls planned host availability. This addresses the stated need to sustain sufficient available VM capacity during expected working-hour utilization peaks without substituting a different control.

Incorrect Answers

A:

Session-aware controls protect users during deallocation. This is relevant when the task is to ensure scaling doesn't shut down a host with active users contrary to the approved schedule settings; it does not directly meet the requirement to sustain sufficient available VM capacity during expected working-hour utilization peaks.

B:

Scaling plans automate pooled host capacity scheduling. This is relevant when the task is to control VM availability throughout ramp-up, peak and off-peak phases according to a defined weekly schedule; it does not directly meet the requirement to sustain sufficient available VM capacity during expected working-hour utilization peaks.

C:

Autoscale phase times depend on schedule time zone. This is relevant when the task is to prevent pooled capacity being started an hour late after a schedule's wrong timezone was selected; it does not directly meet the requirement to sustain sufficient available VM capacity during expected working-hour utilization peaks.

Question 910

An AVD service owner asks for validation that Local Administrators group restrictions enables staff to prevent ordinary pooled desktop users from escalating to local admin privileges on shared hosts. Which test should pass?

  1. Code Integrity event logs record predicted blocks while test programs still run
  2. Audit results record would-be blocked writes without interrupting the current production workflow
  3. Policy reports show the assigned hosts compliant with baseline settings
  4. Membership inspection shows only authorized administrators and nonadmin user actions are denied

Explanation

Correct Answer

D:

This is the direct functional outcome for Local Administrators group restrictions: membership inspection shows only authorized administrators and nonadmin user actions are denied. Local group membership controls guest administrative privileges. The observed behavior supports the specified acceptance requirement.

Incorrect Answers

A:

That evidence concerns App Control for Business audit mode, used to measure which line-of-business binaries would be blocked before enforcing a new policy fleet-wide. It does not establish whether Local Administrators group restrictions satisfies the current requirement to prevent ordinary pooled desktop users from escalating to local admin privileges on shared hosts.

B:

That evidence concerns Controlled Folder Access audit mode, used to identify planned app compatibility problems before a protected folder policy is enforced. It does not establish whether Local Administrators group restrictions satisfies the current requirement to prevent ordinary pooled desktop users from escalating to local admin privileges on shared hosts.

C:

That evidence concerns Security baseline deployment with Intune, used to apply required Windows endpoint hardening settings consistently to supported AVD multi-session VMs. It does not establish whether Local Administrators group restrictions satisfies the current requirement to prevent ordinary pooled desktop users from escalating to local admin privileges on shared hosts.


Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

AZ-140 Premium File

Premium File
AZ-140 Premium File
372 Q&A
$76.99$69.99

AZ-140 Training Video Course

Training Course
AZ-140 Training Video Course
79 Lectures
$27.49$24.99

AZ-140 Study Guide

Study Guide
AZ-140 Study Guide
430 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.