Practice Free AZ-140 Exam Online Questions
HOTSPOT
You have an Azure subscription.
You plan to deploy an Azure Virtual Desktop solution to the East US Azure region.
The solution will contain the resources shown in the following table.
You need to recommend a business continuity solution that meets the following requirements:
* Users must be able to connect to HostPool1 if a datacenter in the East US region fails.
* Costs must be minimized.
What should you include in the recommendation for each resource? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
For HostPool1, which is part of an Azure Virtual Desktop solution, the best option to ensure users can connect even if a datacenter fails is to deploy across Availability Zones if available in the East US region. This would ensure that even if one zone goes down, the other zones can continue serving users. However, if Availability Zones are not available or if you want to minimize costs, Azure Site Recovery would be a suitable alternative to replicate VMs to a secondary region, ensuring business continuity in the event of a primary region failure.
For the storage1 account that contains the user profile share, you would want a redundancy option that provides failover capabilities across regions. The Geo-redundant storage (GRS) option provides that by replicating data to a secondary region hundreds of miles away from the primary region, ensuring data is durable even in the case of a complete regional outage or disaster. Geo-zone-redundant storage (GZRS) adds additional high availability by also replicating across Availability Zones in the primary region, but it may be more costly than GRS.
Based on the requirements to enable users to connect to HostPool1 even if a datacenter in the East US region fails and to minimize costs, the recommendations would be:
For HostPool1: Azure Site Recovery
For storage1: Geo-redundant storage (GRS)
These options will ensure business continuity while also considering cost minimization.
HOTSPOT
You have an Azure subscription that contains an Azure Virtual Desktop deployment.
The subscription contains the virtual networks shown in the following table.
have virtual network peering configured as shown in the following table.
The deployment contains the session hosts shown in the following table.
Windows Defender Firewall is configured on each session host to allow all network traffic between the session hosts For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You need to enable just-in-time (JIT) VM access for all the session hosts.
What should you do first?
- A . Deploy Azure Bastion to VNET1.
- B . Assign network security groups (NSGs) to the network interfaces of the five session hosts.
- C . Configure Access control (IAM) for HostPool1.
- D . Assign a network security group (NSG) to Subnet1.
You have the devices shown in the following table.
You plan to deploy Azure Virtual Desktop for client access to remote virtualized apps.
Which devices support the Remote Desktop client?
- A . Device1 only
- B . Device1 and Device2 only
- C . Device1 and Device3 only
- D . Device1, Device2, and Device3
DRAG DROP
You have a Windows Virtual Desktop host pool named Pool1. Pool1 contains session hosts that use FSLogix profile containers hosted in Azure NetApp Files volumes.
You need to back up profile files by using snapshots.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/azure-netapp-files/azure-netapp-files-manage-snapshots
You have a Windows Virtual Desktop host pool.
You need to install Microsoft Antimalware for Azure on the session hosts.
What should you do?
- A . Add an extension to each session host.
- B . From a Group Policy Object (GPO), enable Windows 10 security features.
- C . Configure the RDP Properties of the host pool.
- D . Sign in to each session host and install a Windows feature.
A
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/antimalware
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named
Storage1.
Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1.
The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . the Storage Blob Data Contributor role for storage1
- B . the List folder / read data NTFS permissions for share1
- C . the Modify NTFS permissions for share1
- D . the Storage File Data SMB Share Reader role for storage1
- E . the Storage File Data SMB Share Elevated Contributor role for storage1
- F . the Storage File Data SMB Share Contributor role for storage1
CF
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share
You have a Azure Virtual Desktop host pool that contains live session hosts. The session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services. Solution: You configure the RDP Properties of the host pool.
Does This meet the goal?
- A . Yes
- B . No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop deployment.
You need to ensure that users are signed out automatically when they disconnect from a session.
Solution: From the Local Group Policy Editor, you configure the Session Time Limits settings.
Does this meet the goal?
- A . Yes
- B . No
HOTSPOT
You have an Azure Virtual Desktop deployment that contains a host pool named Pooll.
Pool1 contains five session hosts joined to an Active Directory Domain Services {AD DS) domain. You plan to use the Azure portal to add additional session hosts and specify a custom configuration.
Which type of custom configuration should you use. and where should you store the custom configuration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
