Practice Free AZ-140 Exam Online Questions
You have an Azure subscription.
You need to deploy an Azure Virtual Desktop host pool that will contain 20 Windows 11 session hosts.
The solution must meet the following requirements:
• Each session host must have a Windows client license applied.
• Administrative effort must be minimized.
What should you use to deploy the session hosts?
- A . Microsoft Intune
- B . the Azure portal
- C . Windows Autopilot
- D . an Azure Automation runbook
HOTSPOT
You have an Azure virtual machine named VM1 that runs Windows 10 Enterprise multi-session.
You plan to add language packs to VM1 and create a custom image of VM1 for a Windows Virtual Desktop host pool.
You need to ensure that modern apps can use the additional language packs when you deploy session hosts by using the custom image.
Which command should you run first? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
Reference:
https://docs.microsoft.com/en-us/troubleshoot/windows-server/deployment/issues-appx-cleanup-maintenance-task
https://docs.microsoft.com/en-us/powershell/module/scheduledtasks/disable-scheduledtask?view=windowsserver2019-ps
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The domain contains the domain controllers shown in the following table.
The DNS servers are configured to forward requests to an external DNS service.
You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.
You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.
You need to configure DNS to meet the following requirements:
✑ Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.
✑ Ensure that azure Virtual Desktop remains operational if a DNS server fails.
✑ Minimize administrative effort.
What should you configure?
- A . the DNS settings of VNET2 to use Server2 and Served
- B . the DNS settings of VNET2 to use the Azure DNS service
- C . the DNS settings of the virtual machines to use Server2 and Server1
- D . the DNS settings of the virtual machines to use the Azure DNS service
A
Explanation:
To ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources, while also ensuring high availability of DNS resolution and minimizing administrative effort, you should configure:
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
✑ Image1 must replicate in the South India region.
✑ The session hosts in Pool2 must be based on Image1.
✑ Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
- A . Create a new shared image gallery named SIG2 in the South India region. Upload a copy of Image1 to SIG2.
- B . Create a new Azure Storage account named storage2 in the South India region. Copy Image1 to a shared folder in storage2.
- C . From SIG1, update the replication for the latest image version of Image1.
- D . Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of Image1 to the FSLogix profile container.
C
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries
HOTSPOT
You network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The domain contains the users shown in the following table.
You have a Windows Virtual Desktop deployment that contains the application groups shown in the following table.
You have the workspaces shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Explanation:
Based on the information provided:
User1 is a member of Group1 and has the role of Desktop Virtualization Workspace Reader.
User2 is a member of Group2 and has the role of Desktop Virtualization Application Group Reader.
AppGroup1 is assigned to Group1 and contains Microsoft Word.
AppGroup2 is assigned to Group2 and contains Microsoft Excel.
AppGroup3 is assigned to both Group1 and Group2 and contains Microsoft PowerPoint.
Workspace1 is associated with AppGroup1.
Workspace2 is associated with AppGroup2.
The role of Workspace Reader allows a user to view information about the workspace but does not grant access to the applications within the workspace. The role of Application Group Reader allows a user to view information about the application group but does not grant access to the applications within the application group.
The applications listed in the Remote Desktop client for a user are determined by the application groups they have access to. Since AppGroup3 contains Microsoft PowerPoint and is assigned to both Group1 and Group2, users in both groups will see PowerPoint listed in their Remote Desktop client.
Let’s evaluate each statement:
User1 has PowerPoint listed in the Remote Desktop client.
Since User1 is part of Group1 and AppGroup3 (which contains PowerPoint) is assigned to Group1, User1 will have PowerPoint listed in the Remote Desktop client.
Answer. Yes
User1 has Word listed in the Remote Desktop client.
User1 is part of Group1, and AppGroup1 (which contains Word) is assigned to Group1 and associated with Workspace1. Since User1 is a Desktop Virtualization Workspace Reader, they can see the workspace but this role does not grant access to use the applications within the workspace. However, the access to applications is determined by the application group membership rather than the workspace visibility. Therefore, assuming that membership in Group1 grants access to the applications in AppGroup1, User1 will have Word listed.
Answer. Yes
User2 has PowerPoint listed in the Remote Desktop client.
User2 is part of Group2, and AppGroup3 (which contains PowerPoint) is assigned to both Group1 and Group2. Therefore, User2 will have PowerPoint listed in the Remote Desktop client.
Answer. Yes
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a W indows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Computer GPO settings.
Does that meet the goal?
- A . Yes
- B . No
Your network contains an on-premises Active Directory domain named contoso.com.
You have an Azure subscription that contains the resources shown in the following table.
You need to create a share that will host FSLogix profiles for AVDPool1.
The solution must meet the following requirements:
* Maximize read and write performance for the profiles.
* Control access to the SMB share by using the users and groups stored in contoso.com.
Which account should you use to host the share?
- A . Account1
- B . Account2
- C . Account3
A
Explanation:
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-netapp-comparison
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services. Solution: You modify the IP configuration of each session host.
Does that meet the goal?
- A . Yes
- B . No
You have an Azure Virtual Desktop deployment.
You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts.
You need to enable secure boot and vTPM on the session hosts.
How should you configure the Virtual Machines settings?
- A . Enable encryption at rest and a platform-managed key.
- B . Set Security type to Trusted launch virtual machines.
- C . Enable a system-assigned managed identity.
- D . Set Network security group to Advanced.
You have a Microsoft Entra tenant named contoso.com and an Azure Virtual Desktop deployment. You have a RemoteApp app group named RemoteAppV
You have a partner company named Fabrikam, Inc. that has 200 users. The users require access to RemoteApp!. You need to identify which type of pricing is associated with providing RemoteAppI access to the Fabrikam users.
What should you identify?
- A . compute only
- B . compute, storage, and networking only
- C . Azure Virtual Desktop per-user access and compute only
- D . Azure Virtual Desktop per-user access only
- E . Azure Virtual Desktop per-user access, compute, storage, and networking