Exam AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop earns the Microsoft Certified: Azure Virtual Desktop Specialty. It is the main certification for VDI engineers on Azure: host pools and session hosts, golden images, FSLogix, RemoteApp and App attach, identity and Conditional Access, Defender protection, monitoring, autoscaling and disaster recovery. The skills measured were last updated on 20 July 2026, and the exam now includes RDP Multipath, confidential VMs and Trusted Launch.
For Citrix and VMware Horizon engineers, AZ-140 is the most direct certification for moving into Azure. This guide follows the official study guide: four skill areas with weights, the FSLogix and networking details that matter, a 6-week plan and 15 original scenario questions.
Quick facts (Microsoft Learn, November 2026)
| Item | Detail |
|---|---|
| Certification | Microsoft Certified: Azure Virtual Desktop Specialty |
| Passing score | 700 |
| Skills measured | As of 20 July 2026 (minor changes to identity, security, FSLogix, clients and apps) |
| Renewal | Every year, with a free online assessment on Microsoft Learn |
| Practice | Free Practice Assessment; new version on AI Skills Navigator |
| Price | Based on the country where you take the exam (Pearson VUE) |
Read the official AZ-140 study guide before booking.
Who should take AZ-140?
- Citrix, VMware Horizon and RDS administrators moving to Azure. See our Citrix to AVD migration guide.
- Desktop and Windows Server administrators who manage end-user environments.
- Azure administrators (AZ-104) who support VDI projects.
Skills measured and weights
| Skill area | Weight |
|---|---|
| Plan and implement an Azure Virtual Desktop infrastructure | 40–45% |
| Plan and implement identity and security | 15–20% |
| Plan and implement user environments and apps | 20–25% |
| Monitor and maintain an Azure Virtual Desktop infrastructure | 10–15% |
1. AVD infrastructure (40–45%)
- Networking: capacity and speed; session host network design; RDP Shortpath, RDP Multipath and QoS; Private Link for AVD; connectivity troubleshooting.
- Storage: storage for FSLogix; storage accounts and Azure Files shares; Azure NetApp Files.
- Host pool planning: resource groups, subscriptions and management groups; session host OS (Windows 11 Enterprise multi-session vs Windows Server); licensing; pooled vs personal host pools; sizing for performance and VM capacity.
- Implementing host pools: portal; automation with PowerShell, Azure CLI, ARM and Bicep; host pool and session host settings; licensing, including Windows client eligibility and RDS CALs for Windows Server.
- Images: manual images; Azure VM Image Builder; updating images; lifecycle; Azure Compute Gallery.
Licensing is a common source of mistakes. Read our AVD licensing explainer and the AVD architecture design guide.
2. Identity and security (15–20%)
- Identity: AD DS vs Microsoft Entra ID vs Entra Domain Services; session host requirements per scenario; Azure RBAC; Conditional Access; passwordless, smart card and MFA; local roles and rights; Entra single sign-on.
- Security: Defender for Cloud; Defender Antivirus; Defender for Endpoint; UDRs, NSGs and Azure Firewall; Azure Bastion and just-in-time VM access; App Control for Business and Controlled Folder Access; confidential VMs and Trusted Launch.
3. User environments and apps (20–25%)
- FSLogix: recommended configuration; Profile Containers; ODFC containers; Cloud Cache; application masking.
- User experience: choosing and deploying clients; device and multimedia redirection; printing and Universal Print; Intune or Group Policy settings; RDP properties; session timeouts; Start VM on Connect; assigning personal desktops.
- Apps: application groups; RemoteApp; Microsoft 365 Apps; OneDrive in multi-session; Teams with the WebRTC Redirector Service; browsers; App attach packages.
# FSLogix Profile Container: key registry settings on a session host
reg add "HKLM\SOFTWARE\FSLogix\Profiles" /v Enabled /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\FSLogix\Profiles" /v VHDLocations /t REG_MULTI_SZ /d "\\stavdprofiles.file.core.windows.net\profiles" /f
reg add "HKLM\SOFTWARE\FSLogix\Profiles" /v DeleteLocalProfileWhenVHDShouldApply /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\FSLogix\Profiles" /v FlipFlopProfileDirectoryName /t REG_DWORD /d 1 /fFSLogix questions come up in almost every AVD interview. Practise with our FSLogix with AVD interview questions.
4. Monitor and maintain (10–15%)
- Log collection; Azure Monitor and AVD Insights workbooks; capacity and performance; autoscaling (scaling plans); active sessions and application groups.
- Update strategy; disaster recovery and multi-region design; backups for FSLogix profiles, personal desktops and images.
6-week study plan
| Week | Focus | Lab |
|---|---|---|
| 1 | AVD architecture, licensing, host pool types, identity options | Pooled host pool with two Entra-joined session hosts |
| 2 | Networking: RDP Shortpath and Multipath, Private Link, NSGs, Firewall, Bastion | Enable Shortpath and confirm UDP in the connection info |
| 3 | Storage and FSLogix: Azure Files, NetApp Files, Profile and ODFC containers, Cloud Cache | FSLogix profiles on Azure Files with Entra Kerberos |
| 4 | Images: Image Builder, Compute Gallery, updates; automation with Bicep or PowerShell | Build a golden image and redeploy the pool from it |
| 5 | Apps: RemoteApp, App attach, Teams optimisation, M365 Apps, OneDrive; Conditional Access and MFA | Publish two RemoteApps and an App attach package |
| 6 | Monitoring, AVD Insights, scaling plans, Start VM on Connect, DR and backup; Practice Assessment | Scaling plan for office hours; book the exam |
15 scenario questions with answers
These are original scenarios written for this guide, not exam questions.
1. 200 call-centre users run the same apps and don't need their own VM. Which host pool type?
A pooled host pool with Windows 11 Enterprise multi-session.
2. Developers need admin rights and their own persistent desktop. Which host pool type?
A personal host pool with assigned desktops.
3. Users' profiles must follow them to any session host. What do you configure?
FSLogix Profile Containers on Azure Files or Azure NetApp Files.
4. Profiles must stay available even if one storage location fails. Which FSLogix feature?
Cloud Cache with multiple storage locations.
5. Users on the corporate network report laggy sessions over TCP. What improves transport?
RDP Shortpath (UDP), with QoS policies.
6. Session hosts must be rebuilt from a patched golden image every month. Which services?
Azure VM Image Builder with Azure Compute Gallery.
7. Finance users should see only Excel and the ERP client, not a full desktop. What do you publish?
RemoteApps in a RemoteApp application group.
8. Apps must be added to session hosts without baking them into the image. Which feature?
App attach.
9. Teams calls in AVD use too much CPU on the session host. What do you set up?
Teams media optimisation with the Remote Desktop WebRTC Redirector Service.
10. Personal desktops are deallocated at night to save money, but users must still connect in the morning. Which feature?
Start VM on Connect.
11. Pooled hosts should scale down after office hours and up at 9 am. What do you configure?
An autoscale scaling plan.
12. Access must require MFA when users connect from outside India. What do you use?
A Microsoft Entra Conditional Access policy targeting Azure Virtual Desktop.
13. Admins need RDP access to session hosts without public IPs. What do you use?
Azure Bastion or just-in-time VM access.
14. Session hosts must have Secure Boot and vTPM. Which feature?
Trusted Launch (or confidential VMs for higher isolation).
15. Management wants a dashboard of connection reliability and session host health. What do you use?
AVD Insights workbooks in Azure Monitor.
After AZ-140
- Practise Azure AVD interview questions and AVD troubleshooting scenarios.
- Compare platforms in Windows 365 vs AVD vs Citrix and plan your path with the VDI specialist career path.
- See live VDI and cloud jobs.
Cloud Soft Solutions in Ameerpet, Hyderabad teaches Citrix, Azure Virtual Desktop, Intune and FSLogix with real-time labs. See the Citrix, AVD and Intune course and all courses.
📞 Call +91 96660 19191 · WhatsApp · Flat No. 513, 5th Floor, Nilagiri Block, Aditya Enclave, Ameerpet, Hyderabad
Frequently Asked Questions
What certification does AZ-140 earn?
Microsoft Certified: Azure Virtual Desktop Specialty.
What is the AZ-140 passing score?
700.
Which AZ-140 skill area has the most weight?
Plan and implement an Azure Virtual Desktop infrastructure, at 40–45%.
When were the AZ-140 skills last updated?
The current skills measured apply as of 20 July 2026.
Is AZ-140 useful for Citrix engineers?
Yes. It covers the same VDI concepts (host pools, images, profiles, published apps) on Azure, so it is the most direct certification for moving from Citrix to Azure.
Does AZ-140 cover FSLogix?
Yes. FSLogix Profile Containers, ODFC containers, Cloud Cache and application masking are part of the user environments and apps area (20–25%).
