Exam Domains

1.0 Plan and implement an Azure Virtual Desktop infrastructure 40%

1.1Plan and implement networking for Azure Virtual Desktop
Assess network capacity and speed requirements for Azure Virtual Desktop; Design network configuration for session hosts to meet requirements for Azure Virtual Desktop; Plan and implement Remote Desktop Protocol (RDP) Shortpath, RDP Multipath, and quality of service (QoS) policies; Plan and implement an Azure Private Link solution for Azure Virtual Desktop
1.2Plan and implement storage for Azure Virtual Desktop user data
Plan storage for Azure Virtual Desktop user data; Implement storage for FSLogix components; Implement storage accounts for Azure Virtual Desktop; Implement file shares for Azure Virtual Desktop; Implement Azure NetApp Files for Azure Virtual Desktop
1.3Plan host pools and session hosts
Recommend resource groups, subscriptions, and management groups for Azure Virtual Desktop resources; Recommend an operating system (OS) for Azure Virtual Desktop session hosts; Recommend an appropriate licensing model for Azure Virtual Desktop based on requirements; Plan a host pool architecture; Design an Azure Virtual Desktop configuration for performance requirements; Design an Azure Virtual Desktop configuration for Azure Virtual Machines capacity requirements
1.4Implement host pools and session hosts
Create host pools and session hosts by using the Azure portal; Automate creation of Azure Virtual Desktop hosts and host pools by using PowerShell, Azure CLI, Azure Resource Manager templates (ARM templates), and Bicep files; Configure host pool and session host settings; Configure licensing for session hosts, including user eligibility for Windows client access and RDS Client Access License (CAL) requirements for Windows Server; Create and manage session host images; Create an image manually; Create an image by using Azure VM Image Builder; Modify an image; Plan and implement lifecycle management for images; Apply OS and application updates to an image; Create a session host by using a custom image; Plan and implement image storage, including Azure Compute Gallery

2.0 Plan and implement identity and security 15%

2.1Plan and implement identity integration
Select an identity scenario for Azure Virtual Desktop, including Active Directory Domain Services (AD DS), Microsoft Entra ID, and Microsoft Entra Domain Services; Specify requirements to configure the Azure Virtual Desktop session host for an identity scenario
2.2Plan and implement Azure role-based access control (Azure RBAC) for Azure Virtual Desktop
2.3Plan and implement Microsoft Entra Conditional Access policies for connections to Azure Virtual Desktop
2.4Plan and implement authentication options in Azure Virtual Desktop, including passwordless, smart card, and multifactor authentication
2.5Manage roles, groups, and rights assignments on Azure Virtual Desktop session hosts
2.6Configure single sign-on
2.7Plan and implement security
Plan, implement, and manage security for Azure Virtual Desktop session hosts by using Microsoft Defender for Cloud; Configure session host protection by using Microsoft Defender Antivirus; Configure session host protection by using Microsoft Defender for Endpoint, including onboarding and scanning options; Implement and manage network security for connections to Azure Virtual Desktop, including user defined routes (UDRs), network security groups (NSGs), and Azure Firewall; Configure Azure Bastion or just-in-time (JIT) VM access for administrative access to session hosts; Plan for and implement Windows threat protection features on Azure Virtual Desktop session hosts, including Windows Defender Application Control and Controlled Folder Access; Plan for and implement Azure confidential VMs and Trusted Launch security features for Azure Virtual Desktop session hosts

3.0 Plan and implement user environments and apps 20%

3.1Plan and implement FSLogix
Recommend FSLogix configuration; Configure FSLogix Profile Containers; Configure FSLogix Office Profile Containers (ODFC); Configure FSLogix Cloud Cache; Implement FSLogix application masking
3.2Plan and implement user experience and client settings
Choose an Azure Virtual Desktop client; Choose a deployment method for the client; Deploy and troubleshoot Azure Virtual Desktop clients; Configure device redirection; Configure multimedia redirection; Configure printing and Universal Print; Configure user settings through Microsoft Intune policies or Group Policy; Configure Remote Desktop Protocol (RDP) properties on a host pool; Configure session timeout properties; Implement the Start Virtual Machine on Connect feature
3.3Assign and unassign personal desktops to users
3.4Install and configure apps on a session host
Choose a method for deploying an app to Azure Virtual Desktop; Create and configure an application group; Assign users to application groups; Publish an application as a RemoteApp
3.5Implement and manage Microsoft 365 apps on Azure Virtual Desktop session hosts
Implement and manage OneDrive, including multisession environments; Implement and manage Microsoft Teams, including the Remote Desktop WebRTC Redirector Service; Implement and manage browsers for Azure Virtual Desktop sessions
3.6Configure dynamic application delivery by using app attach
Create an application package for app attach

4.0 Monitor and maintain an Azure Virtual Desktop infrastructure 10%

4.1Monitor and manage Azure Virtual Desktop services
Configure log collection and analysis for Azure Virtual Desktop session hosts; Monitor Azure Virtual Desktop by using Azure Monitor; Customize Azure Monitor workbooks for Azure Virtual Desktop Insights
4.2Optimize session host capacity and performance
Implement autoscaling in host pools
4.3Monitor and manage active sessions and application groups
4.4Plan and implement updates, backups, and disaster recovery
Recommend an update strategy for session hosts; Plan and implement a disaster recovery plan for Azure Virtual Desktop; Plan for multi-region implementation; Design and implement a backup strategy for Azure Virtual Desktop; Configure backup and restore for FSLogix user profiles, personal desktops, and images

Exam Details

Question TypesMultiple Choice, Multiple Response, Drag and Drop, Case Study, Build List, Hot Area, Repeated Answer Choices

FormatLinear

Online ProctoringAvailable

ID RequirementsOne valid, government-issued photo ID. Name on ID must match registration. For online: webcam required, room must be clear of people and materials.

RenewalRequired -- Microsoft certifications (Associate/Expert/Specialty) are renewed annually for free via a short renewal assessment on Microsoft Learn. Renewal assessment available 6 months before expiry. Fundamentals certifications do not expire.

PrerequisitesExperience with Azure technologies, including compute, networking, identity, storage, and resiliency. Ability to manage end-user desktop environments, including delivering applications and configuring user settings. Use of the Azure portal, templates, scripting, and command-line tools to manage an Azure Virtual Desktop deployment.

Retake PolicyNo waiting period for first retake if score >= 500 on failed attempt. If score < 500: 14-day waiting period before retake. Maximum 5 attempts per exam per year (365 days). Free retake voucher sometimes included in official instructor-led training.

LanguagesEnglish, Simplified Chinese, Traditional Chinese, French, German, Japanese, Korean, Portuguese, Russian, Spanish, Arabic, Indonesian

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Exam Blueprint

Exam Domains

Exam Details

Official Study Resources