Microsoft

AZ-140 Free Practice Questions

This is the free Microsoft AZ-140 practice question bank — 160 of 320 total questions, each with a full explanation, free to read with no signup required. Updated 2026-08-06.

Every answer is verified against official Microsoft documentation — see our methodology.

Question 1

You have an Azure subscription that contains an Azure Virtual Desktop deployment and the storage accounts shown in the following table. You need to configure storage for the FSLogix profile containers of the Azure Virtual Desktop deployment. The solution must meet the following requirements: • Support FSLogix Profile containers. • Minimize costs. Which storage account should you use for the FSLogix profile containers?

A. storageacc1
B. storageacc2
C. storageacc3
D. storageacc4
Show Answer
Correct Answer: B
Explanation:
FSLogix profile containers require Azure Files with SMB support. To minimize costs while supporting FSLogix, the appropriate choice depends on the storage account capabilities shown in the missing table. Based on typical Azure exam scenarios, the premium FileStorage account that supports Azure Files is the expected answer, but the table is required to verify.

Question 2

You have an Azure Virtual Desktop environment that is deployed across multiple Azure regions. You plan to implement FSLogix profile containers. You need to ensure that the profile containers will be available if a region fails. The solution must minimize administrative effort. Which type of storage should you use?

A. Storage Spaces Direct and FSLogix profile containers
B. Azure Blob Storage
C. Azure NetApp Files
D. Azure Files
Show Answer
Correct Answer: C
Explanation:
Azure NetApp Files is the best choice for FSLogix profile containers in a multi-region Azure Virtual Desktop deployment when profiles must remain available during a regional failure with minimal administration. It provides high-performance SMB storage and supports cross-region replication for disaster recovery. Azure Files offers zone and geo-redundancy options but does not provide the same managed cross-region FSLogix replication/failover capabilities as Azure NetApp Files. Storage Spaces Direct requires managing infrastructure, and Azure Blob Storage is not suitable for FSLogix profile containers over SMB.

Question 3

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 100 session hosts that run Windows 11 on general-purpose virtual machines. You plan to implement Quality of Service (QoS) for the deployment. What should you do first?

A. Configure a scaling plan.
B. Switch to a compute optimized virtual machine.
C. Implement RDP Shortpath.
D. Switch to a high-performance computing (HPC) virtual machine.
Show Answer
Correct Answer: C
Explanation:
Quality of Service (QoS) for Azure Virtual Desktop traffic relies on UDP transport so that DSCP markings can be applied. RDP Shortpath enables UDP-based transport for AVD sessions, making it the prerequisite before configuring QoS policies. Scaling plans and changing VM sizes or types do not enable QoS.

Question 5

HOTSPOT - You have an Azure Virtual Desktop deployment that contains Windows 11 session hosts. You have an MSIX package named App1. You need to use app attach to deploy an MSIX image based on App1. The solution must optimize performance. Which command should you run, and which image format should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 5
Show Answer
Correct Answer: Command: msixmgr.exe Format: CIM
Explanation:
MSIX app attach images are created from MSIX packages using msixmgr.exe. For Azure Virtual Desktop on Windows 11, the recommended image format for optimal performance is CIM due to faster mount/unmount and lower resource usage.

Question 6

HOTSPOT - You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1 and a standard storage account named account1. Pool1 contains two session hosts and uses FSLogix profile containers. account1 contains an Azure Files share named share1 that stores the profile containers. Users report that signing in to the session hosts is slow. You need to reduce how long it takes to sign in to the session hosts. The solution must minimize administrative effort. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 6
Show Answer
Correct Answer: Recreate share1: In an Azure Files Premium share Configure: SMB Multichannel
Explanation:
Premium Azure Files provides lower latency and higher IOPS for FSLogix profile containers, and SMB Multichannel improves SMB throughput and resiliency, reducing profile load/sign-in time with minimal administration.

Question 7

You have an Azure subscription that contains an Azure Virtual Desktop session host named VM1. You plan to deploy an app named App1 that will process Personally Identifiable Information (PII) data. You need to ensure that App1 is deployed to a confidential virtual machine. The solution must minimize administrative effort. What should you do?

A. On VM1, enable Azure Disk Encryption for the operating system disk. Install App1 on the operating system disk.
B. Deploy a new virtual machine and install App1.
C. On VM1, enable File Integrity Monitoring (FIM) and install App1.
D. On VM1, attach a new data disk and enable BitLocker Drive Encryption (BitLocker). Install App1 on the new disk.
Show Answer
Correct Answer: B
Explanation:
A confidential virtual machine must be created using a supported confidential VM SKU with AMD SEV-SNP/Intel TDX-based confidential computing features. An existing Azure Virtual Desktop session host cannot be converted into a confidential VM by enabling Azure Disk Encryption, BitLocker, or File Integrity Monitoring. Therefore, the required approach is to deploy a new confidential-capable VM and install the application. This is the only option that satisfies the requirement while minimizing administrative effort.

Question 8

HOTSPOT - You have an on-premises root certification authority (CA) named AdatumCA. You have an Azure subscription that contains an Azure Virtual Desktop deployment. The subscription is linked to a Microsoft Entra tenant that contains the users shown in the following table. All the users have been granted permission to connect to the Azure Virtual Desktop deployment and have AdatumCA-issued certificates installed on their devices. You create a Conditional Access policy named CAPolicy1 that has the following settings: • Assignments o Users: Group 1 o Target resources: Azure Virtual Desktop • Access controls o Grant: Require multifactor authentication • Enable policy: On The certificate-based authentication method policy has the Enable and Target settings shown in the Enable and Target exhibit. (Click the Enable and Target tab.) The certificate-based authentication method policy has the Configure settings shown in the Configure exhibit. (Click the Configure tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Illustration for AZ-140 question 8 Illustration for AZ-140 question 8 Illustration for AZ-140 question 8 Illustration for AZ-140 question 8
Show Answer
Correct Answer: Yes No No
Explanation:
CBA is enabled only for Group1 and configured as single-factor. User1 can sign in without a password using a certificate. User2 is not targeted for CBA. User3 is not required to use a certificate; the CA policy requires MFA, which single-factor CBA alone does not satisfy.

Question 9

HOTSPOT - You have 20 Azure Virtual Desktop session hosts that run Windows 11. You need to enable the following features on the session hosts: • Controlled folder access • Reputation-based protection Which Windows Security tile should you use to enable each feature? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 9
Show Answer
Correct Answer: Controlled folder access: Virus & threat protection Reputation-based protection: App & browser control
Explanation:
Controlled folder access is configured under Windows Security > Virus & threat protection (Ransomware protection). Reputation-based protection is configured under App & browser control.

Question 10

DRAG DROP - You have an Azure subscription that contains the resources shown in the following table. share1 stores FSLogix profile containers and is backed up once a day to Vault1. You need to back up share1 to Vault2. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Illustration for AZ-140 question 10 Illustration for AZ-140 question 10
Show Answer
Correct Answer: Stop the backup for share1. Unregister storage1. Configure share1 to back up to Vault2.
Explanation:
An Azure Files share can be protected by only one Recovery Services vault at a time. Stop protection in the current vault, unregister the storage account from that vault, then configure backup in the new vault. Deleting snapshots or disabling soft delete is not required.

Question 11

You have an Azure Virtual Desktop deployment. You use Hyper-V to create a virtual machine that runs Windows 11 and has the following configurations: • Virtual machine generation: Generation 2 • Disk type: Dynamically expanding • Disk format: VHDX • Disk size: 2 TB You need to prepare the virtual machine before uploading it to Azure. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Decrease the disk size to 1 TB.
B. Change the disk type to fixed.
C. Change the disk type to differencing.
D. Change the disk format to VH
E. Change the virtual machine generation to generation 1.
Show Answer
Correct Answer: B, D
Explanation:
Before uploading a Hyper-V VM to Azure, the virtual hard disk must be in the VHD format and use a fixed-size disk. Generation 2 VMs are supported in Azure, so no generation change is required, and a 2 TB OS disk is within Azure's supported limit.

$19

Get all 320 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.