AZ-140 is an implementation exam. Reading alone is not enough. You should build at least one complete Azure Virtual Desktop environment and be able to explain every dependency from identity and networking through profiles, application delivery, monitoring and recovery.
Understand the exam domains
| Skill area | Weight | Core topics |
|---|---|---|
| Plan and implement AVD infrastructure | 40–45% | Networking, RDP Shortpath and Multipath, Private Link, storage, host pools, session hosts, images, automation and capacity. |
| Plan and implement identity and security | 15–20% | Identity models, Azure RBAC, Conditional Access, SSO, Defender, network controls, App Control and secure administration. |
| Plan user environments and apps | 20–25% | FSLogix, clients, redirection, policies, application groups, RemoteApp, Microsoft 365 Apps, Teams and App Attach. |
| Monitor and maintain AVD | 10–15% | Azure Monitor, Insights, autoscale, sessions, update strategy, backup, disaster recovery and multi-region planning. |
Build a representative lab
Your lab should include a workspace, pooled host pool, at least two session hosts, an application group, FSLogix profile storage, Entra or AD-based identity, monitoring and a controlled image/update process. Keep costs low by using autoscale and shutting down resources when not in use.
- Resource groups separated by lifecycle or responsibility
- VNet, DNS and required outbound connectivity
- Host pool, workspace and application groups
- Entra-joined or domain-joined session hosts
- FSLogix profile containers
- Conditional Access and appropriate RBAC
- Azure Monitor diagnostic settings and AVD Insights
- Image and session-host replacement procedure
Five-week study plan
Design host pools, subscriptions and resource groups. Practise DNS, service tags, Private Link, RDP Shortpath, QoS and FSLogix storage choices. Understand latency and capacity calculations.
Deploy pooled and personal host pools, registration tokens, scaling plans and custom images. Use PowerShell, Azure CLI or Bicep for repeatable deployment. Practise replacing rather than repairing session hosts.
Compare AD DS, Entra ID and Entra Domain Services scenarios. Configure RBAC, Conditional Access, SSO, Defender for Endpoint, NSGs, Firewall and secure administrator access. Review App Control for Business.
Configure profile containers, Cloud Cache, exclusions, application masking, device redirection, multimedia, printing, Microsoft 365 Apps, Teams optimisation, RemoteApp and App Attach.
Build AVD Insights, query logs, tune autoscale, drain hosts, manage active sessions and design backup, image recovery and multi-region continuity. Complete two timed practice assessments.
Commands and automation to recognise
Connect-AzAccount
Get-AzWvdHostPool
Get-AzWvdSessionHost -ResourceGroupName "rg-avd" -HostPoolName "hp-prod"
Update-AzWvdSessionHost -ResourceGroupName "rg-avd" -HostPoolName "hp-prod" `
-Name "host01.contoso.com" -AllowNewSession:$false
# FSLogix profile location example
Set-ItemProperty -Path "HKLM:\SOFTWARE\FSLogix\Profiles" `
-Name VHDLocations -Type MultiString -Value "\\storage.file.core.windows.net\profiles"Troubleshooting method
- Confirm the user can discover the workspace and application group.
- Confirm assignment and Azure RBAC are correct.
- Check session-host availability, registration and drain mode.
- Validate network and identity dependencies.
- Review FSLogix logs and storage access if sign-in is slow or a local profile appears.
- Use Azure Monitor and AVD Insights to correlate connection, host and session evidence.
Exam strategy
- Expect design questions where multiple answers work technically but only one meets the resiliency, cost or operational requirement.
- Know when to use pooled versus personal desktops and desktop versus RemoteApp.
- Understand which settings belong to the host pool, session host, client, Intune/GPO or FSLogix.
- For availability, distinguish service resilience from session-host, profile and application resilience.
- Practise the administrative sequence for drain, notify, sign out, update and restore capacity.
Final readiness checklist
- I have built and rebuilt an AVD host pool.
- I can troubleshoot workspace discovery, connection and FSLogix profile issues.
- I can explain RDP Shortpath, Private Link and network security choices.
- I can design image, autoscale, monitoring and disaster-recovery processes.
- I checked the official objective version for my exam date.
Microsoft references
- Official AZ-140 study guide
- Microsoft Certified: Azure Virtual Desktop Specialty
- Azure Virtual Desktop documentation
- FSLogix documentation
- Microsoft Certification Practice Assessments
Review note: Certification objectives, Microsoft cloud features and portal labels change. Check the official Microsoft page for the date of your exam or production deployment.