Verified AZ-140 dumps Q&As - 2025 Latest AZ-140 Download
Updated 100% Cover Real AZ-140 Exam Questions - 100% Pass Guarantee
Microsoft AZ-140 certification exam is a highly coveted certification that validates the skills of individuals in configuring and operating the Microsoft Azure Virtual Desktop. As businesses continue to shift towards the cloud for their IT infrastructure, the demand for professionals with expertise in Azure Virtual Desktop is rapidly increasing. Passing AZ-140 exam will demonstrate your proficiency in managing and maintaining virtual desktop environments, which can lead to exciting career opportunities and higher salaries.
Preparing for the Microsoft AZ-140 certification exam requires a deep understanding of the Azure Virtual Desktop environment and the ability to apply that knowledge in real-world scenarios. Microsoft offers a range of training courses, study materials, and practice tests to help candidates prepare for the exam. Additionally, candidates can gain hands-on experience by working on real-world projects and practicing with Azure Virtual Desktop in a test environment. With the right preparation and dedication, passing the Microsoft AZ-140 certification exam can be a significant achievement in your career.
NEW QUESTION # 129
What should you do to meet the user profile requirements?
- A. Join storage1 to the AD DS domain.
- B. Create a new Azure Files share.
- C. Join storage1 to the Microsoft Entra Domain Services managed domain.
- D. Create a new Azure Blob Storage account.
Answer: B
NEW QUESTION # 130
You have an Azure Virtual Desktop deployment.
You plan to use a Conditional Access policy to enforce multi-factor authentication (MFA) when users connect to the deployment. The solution must meet the following requirements:
* Enforce MFA when a user connects to Azure Virtual Desktop by using a subscription feed.
* Enforce MFA when a user authenticates to a session host that has single sign-on (SSO) enabled.
You need to identify which cloud apps to use for the Conditional Access policy.
Which app should you use for each requirement? To answer, drag the appropriate apps to the correct requirements. Each app may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 131
You have an Azure Virtual Desktop deployment.
The session hosts are joined to an on-premises Active Directory domain named contoso.com.
You need to limit user sessions to three hours.
What should you configure?
- A. the properties of the workspace
- B. the RDP Properties of a host pool
- C. just-in-time (JIT) VM access
- D. a Group Policy Object (GPO) in contoso.com.
Answer: D
NEW QUESTION # 132
You have a Windows Virtual Desktop deployment.
You plan to create the host pools shown in the following table.
You need to recommend the virtual machine size for each host pool. The solution must minimize costs.
Which size should you recommend for each pool? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/nvv3-series
https://docs.microsoft.com/en-us/azure/virtual-machines/dv4-dsv4-series
NEW QUESTION # 133
You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Reference:
https://www.christiaanbrinkhoff.com/2020/03/01/learn-here-how-to-configure-azure-files-with-active- directory-ad-authentication-for-fslogix-profile-container-and-msix-app-attach/
NEW QUESTION # 134
Hotspot Question
You have an Azure Virtual Desktop deployment.
Many users have iOS devices that have the Remote Desktop Mobile app installed.
You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.
How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
- Make sure you have permission to add a TXT record to the domain associated with your email (for example, if your users have @contoso.com email addresses, you would need permissions for the contoso.com domain)
- Create an RD Web feed URL (https://<rdweb-dns-name>.domain/RDWeb/Feed/webfeed.aspx, such as https://rdweb.contoso.com/RDWeb/Feed/webfeed.aspx) Note:
If you're using Azure Virtual Desktop instead of Remote Desktop, you'll want to use these URLs instead:
- If you're using Azure Virtual Desktop (classic):
https://rdweb.wvd.microsoft.com/api/feeddiscovery/webfeeddiscovery.aspx
- If you're using Azure Virtual Desktop: https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-email- discovery
NEW QUESTION # 135
You have an Azure Virtual Desktop deployment that contains an Azure compute gallery. The Azure compute gallery contains an image definition named Definitions Definitionl contains the following image versions:
* 1.0.0
* 1.1.0
* 1.2.0
You need to ensure that when a virtual machine is created from the Azure compute gallery, the 1.1.0 image version is used by default.
What should you do?
- A. Select Exclude from latest for image version 1.2.0. Most Voted
- B. Apply a lock to image version 1.1.0.
- C. Select Exclude from latest for image version 1.0.0.
- D. Apply a tag named default to image version 1.1.0.
Answer: A
Explanation:
Exclude from latest. You can keep a version from being used as the latest image version. https://learn.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries?tabs=azure-cli
NEW QUESTION # 136
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You plan to enable Start VM on connect for Pool1.
You create a custom Azure role named Role1 that has sufficient permissions to start virtual machines on demand.
You need to ensure that the session hosts in Pool1 can start on demand.
To which service principal should you assign Role1?
- A. Azure Virtual Desktop
- B. Managed1
- C. Host1
- D. Azure Compute
- E. Azure Automation
Answer: A
NEW QUESTION # 137
You have an Azure subscription.
You plan to deploy an Azure Virtual Desktop solution that will contain Windows 10 multi-session hosts in a single host pool. The solution has the requirements shown in the following table.
You need to configure the session host for the host pool. The solution must minimize costs.
How many session hosts should the host pool contain, and how many vCPUs should each session host have? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Topic 1, Litware, Inc
Overview
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
Existing Environment. Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.
All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
Deploy Windows Virtual Desktop environments to the East US Azure region for the users in the Boston office and to the South India Azure region for the users in the Chennai office.
Implement FSLogix profile containers.
Optimize the custom virtual machine images for the Windows Virtual Desktop session hosts.
Use PowerShell to automate the addition of virtual machines to the Windows Virtual Desktop host pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
Minimize network latency of the Windows Virtual Desktop connections from the Boston and Chennai offices.
Minimize latency of the Windows Virtual Desktop host authentication in each Azure region.
Minimize how long it takes to sign in to the Windows Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
Enforce Azure MFA when accessing Windows Virtual Desktop apps.
Force users to reauthenticate if their Windows Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
Explicitly allow traffic between the Windows Virtual Desktop session hosts and Microsoft 365.
Explicitly allow traffic between the Windows Virtual Desktop session hosts and the Windows Virtual Desktop infrastructure.
Use built-in groups for delegation.
Delegate the management of app groups to CloudAdmin1, including the ability to publish app groups to users and user groups.
Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to the app groups.
Minimize administrative effort to manage network security.
Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
Use PowerShell to generate the token used to add the virtual machines as session hosts to a Windows Virtual Desktop host pool.
Minimize how long it takes to provision the Windows Virtual Desktop session hosts based on the custom virtual machine images.
Whenever possible, preinstall agents and apps in the custom virtual machine images.
NEW QUESTION # 138
You need to create a Conditional Access policy to meet the security require-ments.
How should you configure the policy? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Explanation:
NEW QUESTION # 139
You are planning the deployment of Pool4.
What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 140
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool! that is integrated with a Microsoft Entra Domain Services managed domain. You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From a Microsoft Entra joined computer, you modify the AADDC Users GPO settings.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION # 141
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts.
Pool1 is configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 142
Hotspot Question
You have an Azure Virtual Desktop Deployment that contains a workspace named Workspace1 and a user named User1. Workspace1 contains a Desktop application group named Pool1Desktop.
At 09:00, you create a conditional access policy that has the following settings:
Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
- Conditions: 0 conditions selected
Access controls
- Grant: Grant access, Require multi-factor authentication
- Sessions: Sign-in frequency 1 hour
User1 performs the actions shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box1: Yes
Subscription to workspace need authentication, hence MFA required.
Box2: No
No action performed at 10:20.
Box3: Yes
Connect to Pool1 need authentication at 13:50.
NEW QUESTION # 143
You have an Azure subscription that contains 500 users. The users are assigned Microsoft Office 365 E1 licenses.
You deploy an Azure Virtual Desktop solution that contains Windows 10 multi-session hosts and streams a custom remote app named App1.
You need to ensure that the users are licensed to stream App1. The solution must minimize costs.
Which license should you use?
- A. a Remote Desktop Services (RDS) client access license (CAL)
- B. Office 365 E3
- C. Microsoft 365 E5
- D. Windows 10 Enterprise E3
Answer: D
Explanation:
Explanation
https://azure.microsoft.com/en-us/pricing/details/virtual-desktop/
NEW QUESTION # 144
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD-joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts.
The solution must minimize administrative effort.
What should you use?
- A. Azure Resource Manager (ARM) templates
- B. Azure Policy
- C. Group Policy
- D. Windows Admin Center
Answer: B
NEW QUESTION # 145
You have a Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the Storage File Data SMB Share Elevated Contributor role for storage1
- B. the Modify NTFS permissions for share1
- C. the Storage File Data SMB Share Contributor role for storage1
- D. the List folder / read data NTFS permissions for share1
- E. the Storage File Data SMB Share Reader role for storage1
- F. the Storage Blob Data Contributor role for storage1
Answer: B,C
Explanation:
You give the user Modify AND remove authenticated users and builtin/users, so that only one user has access to each profile container.
Admins continue to have access if that was given correctly.
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-configure- permissions#azure-rbac-permissions
NEW QUESTION # 146
You have an Azure subscription.
You plan to deploy an Azure Virtual Desktop solution that will contain Windows 10 multi-session hosts in a single host pool. The solution has the requirements shown in the following table.
You need to configure the session host for the host pool. The solution must minimize costs.
How many session hosts should the host pool contain, and how many vCPUs should each session host have?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Explanation:
NEW QUESTION # 147
Drag and Drop Question
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You have a Windows 11 device named Device1 that has Azure Command-Line Interface (CLI) installed.
You need to use Remote Desktop Connection (mstsc.exe) on Device1 to connect to Host1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows
NEW QUESTION # 148
-
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You need to perform the following configurations:
* Enable a managed identity for App1.
* Enable Clipboard redirection for App1.
On which resources should you perform the configurations? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 149
You have an Azure subscription that contains the storage accounts shown in the following table.
You have a custom generalized Windows 10 image.
You plan to deploy an Azure Virtual Desktop host pool that will use the custom image and FSLogix profile containers.
You need to recommend which storage accounts to use for the custom image and the profile containers. The solution must meet the following requirements:
Minimize costs to store the image.
Maximize performance of the profile containers.
Which account should you recommend for each type of content? To answer, drag the appropriate accounts to the correct content type. Each account may be used once, more than once, or not at all. You many need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-customize-master-image#upload-master-image-to-a-storage-account-in-azure
https://docs.microsoft.com/en-us/azure/virtual-desktop/store-fslogix-profile
NEW QUESTION # 150
Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. ActiveDirectory
- B. Hyper-V
- C. Pester
- D. ServerManager
- E. RemoteDesktop
Answer: A,B,C
Explanation:
Contoso identifies the following technical requirements:
From a server named Server1, convert the user profile disks to the FSLogix profile containers.
The PowerShell modules for Hyper-V, Active Directory, and Pester are prerequisites to running the cmdlets to convert user profile disks to FSLogix.
Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/migrate/azure-best-practices/contoso-migration-rds-to-wvd This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
NEW QUESTION # 151
You have an Azure Virtual Desktop deployment.
You plan to use a Conditional Access policy to enforce multi-factor authentication (MFA) when users connect to the deployment. The solution must meet the following requirements:
* Enforce MFA when a user connects to Azure Virtual Desktop by using a subscription feed.
* Enforce MFA when a user authenticates to a session host that has single sign-on (SSO) enabled.
You need to identify which cloud apps to use for the Conditional Access policy.
Which app should you use for each requirement? To answer, drag the appropriate apps to the correct requirements. Each app may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 152
You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains
10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.
You need to deploy Microsoft OneDrive for Business.
Which two actions should you perform for each session host? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Install the OneDrive sync app by using the per-machine installation option.
- B. Deploy an MSIX app attach package.
- C. Install the OneDrive sync app by using the per-user installation option.
- D. Install FSLogix.
- E. Implement Application Masking.
Answer: A,D
Explanation:
Using the OneDrive sync app with non-persistent environments requires that you install the sync app per machine.
https://learn.microsoft.com/en-us/sharepoint/sync-vdi-support
NEW QUESTION # 153
You have a Windows Virtual Desktop deployment.
You plan to create the host pools shown in the following table.
You need to recommend the virtual machine size for each host pool. The solution must minimize costs.
Which size should you recommend for each pool? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/sizes
https://docs.microsoft.com/en-us/azure/virtual-machines/nvv3-series
https://docs.microsoft.com/en-us/azure/virtual-machines/dv4-dsv4-series
NEW QUESTION # 154
......
Microsoft AZ-140 certification exam is ideal for IT professionals who want to enhance their knowledge and skills in cloud computing, virtual desktop infrastructure, and Microsoft Azure. Configuring and Operating Microsoft Azure Virtual Desktop certification exam can help individuals to showcase their expertise in designing and implementing virtual desktop infrastructure solutions on Azure. Configuring and Operating Microsoft Azure Virtual Desktop certification demonstrates that the individual has a thorough understanding of the Azure Virtual Desktop environment and can configure and operate it effectively. The AZ-140 certification is also a valuable asset for organizations as it helps them to identify professionals who have the necessary skills and expertise to manage and deploy virtual desktop infrastructure on Azure.
Use Real Dumps - 100% Free AZ-140 Exam Dumps: https://examsforall.lead2passexam.com/Microsoft/valid-AZ-140-exam-dumps.html