Configuring and Operating Microsoft Azure Virtual DesktopStudy guide
The specialty certification for designing, implementing, managing, and maintaining Azure Virtual Desktop (AVD) and remote apps (AZ-140).
About Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140)
Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) is a Specialty-level certification from Microsoft. This page organizes the exam scope into a 5-chapter, 13-section study guide and lets you check your understanding with exam-style practice questions. A good flow is to read the chapters below in order, then test yourself via "Practice questions."
Exam domains (approximate weighting)
- Plan and implement an Azure Virtual Desktop infrastructure~43%
- Plan and implement identity and security~18%
- Plan and implement user environments and apps~24%
- Monitor and maintain an Azure Virtual Desktop infrastructure~15%
Weights are approximate guidance for the live exam. Each domain is covered in detail in the chapters and sections below.
Official exam information: https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-140
1AVD networking and storage
- 1.1Network requirements and RDP Shortpath
Understand assessing network capacity/speed requirements for Azure Virtual Desktop, designing session-host network configuration, and RDP Shortpath, RDP Multipath, and QoS policies.
- 1.2Azure Private Link and connectivity troubleshooting
Understand planning/implementing an Azure Private Link solution for Azure Virtual Desktop, and monitoring/troubleshooting network connectivity.
- 1.3Storage for user data
Understand planning storage for Azure Virtual Desktop user data, storage for FSLogix components, storage accounts and file shares, and implementing Azure NetApp Files.
2Host pools, session hosts, and images
- 2.1Planning host pool architecture
Understand host pools (pooled/personal) and load-balancing algorithms, session-host OS and licensing models, organizing resource groups/subscriptions/management groups, and designing performance/VM-capacity requirements.
- 2.2Implementing host pools and session hosts
Understand creating host pools/session hosts in the Azure portal, automating creation with PowerShell/Azure CLI/ARM templates/Bicep, and configuring host pool/session host settings and licensing.
- 2.3Session host images
Understand creating session-host images manually and with Azure VM Image Builder, modifying images and lifecycle management, applying OS/app updates, creating session hosts from custom images, and storing images with Azure Compute Gallery.
3Identity and security
- 3.1Identity integration and access control
Understand AVD identity scenarios (AD DS / Microsoft Entra ID / Microsoft Entra Domain Services), session-host identity configuration, Azure RBAC, Conditional Access, authentication options, and Microsoft Entra single sign-on.
- 3.2Securing session hosts
Understand securing session hosts with Microsoft Defender for Cloud / Defender Antivirus / Defender for Endpoint, network security with UDR/NSG/Azure Firewall, Azure Bastion / JIT VM access, Windows threat protection, and confidential VM / Trusted Launch.
4User environments and apps
- 4.1Profile management with FSLogix
Understand FSLogix configuration recommendations, Profile Container, ODFC Container, Cloud Cache, and application masking.
- 4.2User experience and client settings
Understand choosing/deploying AVD clients, device/multimedia redirection, printing and Universal Print, user settings via Intune/Group Policy, RDP properties, session timeouts, Start VM on Connect, and personal-desktop assignment.
- 4.3Delivering apps on session hosts
Understand app deployment methods, application groups (desktop/RemoteApp) and user assignment, Microsoft 365 Apps and OneDrive (multi-session), and dynamic app delivery with App attach.
5Monitoring, updates, and BCDR
- 5.1Monitoring and autoscaling
Understand AVD log collection/analysis, Azure Monitor, customizing AVD Insights workbooks, optimizing capacity/performance, host pool autoscaling, and monitoring active sessions and application groups.
- 5.2Updates, backup, and disaster recovery
Understand session-host update strategy, disaster recovery (DR) planning, multi-region implementation, backup strategy, and backup/restore of FSLogix profiles/personal desktops/images.