AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop
Associate
Azure
Browse certifications
28 modules
·~6h 46m study time
·0 completed
Interactive Study Guide
Each module covers one exam topic with plain-English explanations, real-world scenarios, and built-in practice. Everything you need to understand and retain the material — no tab-switching required.
📖 ELI5 explanations
🔄 Flashcards
✅ Knowledge checks
📊 Compare tables
💡 Exam tips
📍 Progress tracking
Domain 1: Plan and Implement an AVD Infrastructure ›
Domain 2: Plan and Implement Identity and Security ›
Domain 3: Plan and Implement User Environments and Apps ›
Domain 4: Monitor and Maintain an AVD Infrastructure ›
Exam Resources
Official learning paths, exam details, skills measured, and community resources to supplement your study.
Exam Quick Facts
| Detail | Value |
|---|---|
| Exam Code | AZ-140 |
| Title | Configuring and Operating Microsoft Azure Virtual Desktop |
| Level | Associate |
| Pass Score | 700 / 1000 |
| Duration | 100 minutes |
| Questions | ~40-60 |
| Cost | $165 USD (varies by region) |
| Scheduling | Pearson VUE |
| Skills Updated | April 17, 2026 |
Study Resources
| Resource | Link |
|---|---|
| Official Exam Page | Microsoft Learn — AZ-140 |
| Official Study Guide | Microsoft Study Guide |
| Free Practice Assessment | Start Practice Assessment |
| Exam Sandbox | Try the exam interface |
Skills at a Glance
| Skill Area | Weight |
|---|---|
| Plan and implement an Azure Virtual Desktop infrastructure | 40-45% |
| Plan and implement identity and security | 15-20% |
| Plan and implement user environments and apps | 20-25% |
| Monitor and maintain an Azure Virtual Desktop infrastructure | 10-15% |
Who is this exam for?
This is a Microsoft Azure certification exam. It tests your practical knowledge of Azure services and your ability to implement, manage, and design solutions on the Azure platform. This is an associate-level exam that expects hands-on experience. You should have practical knowledge of the technologies covered.
Skills Measured
Plan and implement an Azure Virtual Desktop infrastructure (40–45%)
This domain covers infrastructure design and implementation. You need to understand how to architect solutions using the right services and patterns.
Plan, implement, and manage networking for Azure Virtual Desktop
- Assess network capacity and speed requirements for Azure Virtual Desktop
- Design network configuration for session hosts to meet requirements for Azure Virtual Desktop
- Plan and implement Remote Desktop Protocol (RDP) Shortpath, RDP Multipath, and quality of service (QoS) policies
- Plan and implement an Azure Private Link solution for Azure Virtual Desktop
- Monitor and troubleshoot network connectivity
Plan and implement storage for Azure Virtual Desktop user data
- Plan storage for Azure Virtual Desktop user data
- Implement storage for FSLogix components
- Implement storage accounts for Azure Virtual Desktop
- Implement file shares for Azure Virtual Desktop
- Implement Azure NetApp Files for Azure Virtual Desktop
Plan host pools and session hosts
- Recommend resource groups, subscriptions, and management groups for Azure Virtual Desktop resources
- Recommend an operating system (OS) for Azure Virtual Desktop session hosts
- Recommend an appropriate licensing model for Azure Virtual Desktop based on requirements
- Plan a host pool architecture
- Design an Azure Virtual Desktop configuration for performance requirements
- Design an Azure Virtual Desktop configuration for Azure Virtual Machines capacity requirements
Implement host pools and session hosts
- Create host pools and session hosts by using the Azure portal
- Automate creation of Azure Virtual Desktop hosts and host pools by using PowerShell, Azure CLI, Azure Resource Manager templates (ARM templates), and Bicep files
- Configure host pool and session host settings
- Configure licensing for session hosts, including user eligibility for Windows client access and RDS Client Access License (CAL) requirements for Windows Server
Create and manage session host images
- Create an image manually
- Create an image by using Azure VM Image Builder
- Modify an image
- Plan and implement lifecycle management for images
- Apply OS and application updates to an image
- Create a session host by using a custom image
- Plan and implement image storage, including Azure Compute Gallery
Plan and implement identity and security (15–20%)
This domain covers identity and authentication. You need to understand how to manage identities, configure authentication methods, and control access to resources.
Plan and implement identity integration
- Select an identity scenario for Azure Virtual Desktop, including Active Directory Domain Services (AD DS), Microsoft Entra ID, and Microsoft Entra Domain Services
- Specify requirements to configure the Azure Virtual Desktop session host for an identity scenario
- Plan and implement Azure role-based access control (Azure RBAC) for Azure Virtual Desktop
- Plan and implement Microsoft Entra Conditional Access policies for connections to Azure Virtual Desktop
- Plan and implement authentication options in Azure Virtual Desktop, including passwordless, smart card, and multifactor authentication
- Manage roles, groups, and rights assignments on Azure Virtual Desktop session hosts
- Configure single sign-on
Plan and implement security
- Plan, implement, and manage security for Azure Virtual Desktop session hosts by using Microsoft Defender for Cloud
- Configure session host protection by using Microsoft Defender Antivirus
- Configure session host protection by using Microsoft Defender for Endpoint, including onboarding and scanning options
- Implement and manage network security for connections to Azure Virtual Desktop, including user defined routes (UDRs), network security groups (NSGs), and Azure Firewall
- Configure Azure Bastion or just-in-time (JIT) VM access for administrative access to session hosts
- Plan and implement Windows threat protection features on Azure Virtual Desktop session hosts, including Windows Defender Application Control and Controlled Folder Access
- Plan for and implement Azure confidential VMs and Trusted Launch security features for Azure Virtual Desktop session hosts
Plan and implement user environments and apps (20–25%)
This domain covers the skills needed to work with the topics described below. Study each objective carefully and use the linked resources to deepen your understanding.
Plan and implement FSLogix
- Recommend FSLogix configuration
- Configure FSLogix Profile Containers
- Configure FSLogix Office Profile Containers (ODFC)
- Configure FSLogix Cloud Cache
- Implement FSLogix application masking
Plan and implement user experience and client settings
- Choose an Azure Virtual Desktop client
- Choose a deployment method for the client
- Deploy and troubleshoot Azure Virtual Desktop clients
- Configure device redirection
- Configure multimedia redirection
- Configure printing and Universal Print
- Configure user settings through Microsoft Intune policies or Group Policy
- Configure Remote Desktop Protocol (RDP) properties on a host pool
- Configure session timeout properties
- Implement the Start Virtual Machine on Connect feature
- Assign and unassign personal desktops to users
Install and configure apps on a session host
- Choose a method for deploying an app to Azure Virtual Desktop
- Create and configure an application group
- Assign users to application groups
- Publish an application as a RemoteApp
- Implement and manage Microsoft 365 apps on Azure Virtual Desktop session hosts
- Implement and manage OneDrive, including multisession environments
- Implement and manage Microsoft Teams, including the Remote Desktop WebRTC Redirector Service
- Implement and manage browsers for Azure Virtual Desktop sessions
- Configure dynamic application delivery by using app attach
- Create an application package for app attach
Monitor and maintain an Azure Virtual Desktop infrastructure (10–15%)
This domain covers monitoring and maintenance. You need to know how to use monitoring tools, configure alerts, and implement backup and recovery solutions.
Monitor and manage Azure Virtual Desktop services
- Configure log collection and analysis for Azure Virtual Desktop session hosts
- Monitor Azure Virtual Desktop by using Azure Monitor
- Customize Azure Monitor workbooks for Azure Virtual Desktop Insights
- Optimize session host capacity and performance
- Implement autoscaling in host pools
- Monitor and manage active sessions and application groups
Plan and implement updates, backups, and disaster recovery
- Recommend an update strategy for session hosts
- Plan and implement a disaster recovery plan for Azure Virtual Desktop
- Plan for multi-region implementation
- Design and implement a backup strategy for Azure Virtual Desktop
- Configure backup and restore for FSLogix user profiles, personal desktops, and images
What to Study Next
Based on this exam, here are related certifications to consider:
- AZ-104: Microsoft Azure Administrator — Associate
- MD-102: Microsoft 365 Endpoint Administrator — Associate
Quick Links
Compare AZ-140 across AWS & Google Cloud → Cert Compass