Free AZ-140 practice test: 30 questions with answers

Breadth-first distributes sessions across hosts, while depth-first concentrates them on one host until it is full. Round-robin, regional cost placement and random assignment are not the AVD load-balancing methods.

Reverse connect has the session host initiate an outbound connection to the AVD gateway, so no inbound listener is needed. Inbound RDP, SSH tunnels and inbound VPN listeners all expose the host to inbound connections.

The maximum session limit caps concurrent sessions per host in a pooled host pool. Network speed, storage IOPS and workspace counts do not limit sessions.

Start VM on Connect powers on a deallocated session host when a user connects. Bastion provides administrative access, Site Recovery replicates VMs for disaster recovery, and DevOps pipelines automate deployments.

Reservations and savings plans discount steady, committed compute usage. Premium disks and public IPs add cost, and Spot VMs can be evicted, which is unsuitable for user sessions.

Publishing a versioned image to a compute gallery and deploying new hosts from it is the controlled update path. Editing running hosts in place, deleting the workspace and disabling sign-in are unsuitable.

Private endpoints bring AVD control plane access onto a virtual network, keeping that traffic off the public internet. Public IPs, port forwarding and public publishing all expose traffic to the internet instead.

The Desktop Virtualization User role on the application group grants users access to the published resources. Owner is broader than needed, and storage or log readers do not grant desktop access.

RDP properties on the host pool control redirection of the clipboard, drives and printers. Scaling exclusions, storage firewalls and log retention do not govern session redirection.

Azure Key Vault stores secrets and grants access through managed identities or role assignments. The other options expose the secret in plain text or are not secret stores.

Entra Kerberos authentication lets Entra ID identities access Azure Files over SMB with per-user authorisation. Anonymous access, shared keys in scripts and public blob access all weaken security.

Conditional Access grant controls can require a compliant or hybrid-joined device before access is allowed. Storage and DNS settings do not evaluate device compliance.

A pooled host pool lets many users share session hosts, which matches multi-session operating systems. Personal pools give each user a dedicated VM, standalone VMs sit outside AVD management, and the client app alone supplies no hosts.

An application group publishes a desktop or RemoteApp programs from a host pool, and workspaces present those groups to users. Scaling plans manage capacity, profile shares store user profiles, and images are templates for hosts.

Automatic assignment in a personal host pool assigns a host at first sign-in, and the assignment then persists. Load balancing applies to pooled host pools, and RemoteApp streaming is a publishing mode rather than an assignment setting.

A workspace groups application groups and is the feed users see in the AVD client. Storage accounts hold files, the Log Analytics workspace stores logs, and scaling plans manage host capacity.

The Enterprise multi-session editions of Windows 10 and Windows 11 allow many concurrent users on one VM. Single-session editions and Home editions do not support multiple concurrent sessions.

The validation environment host pool receives early updates so they can be tested before production. Scaling plans manage capacity, FSLogix cache stores profiles, and drain mode stops new sessions on a host.

FSLogix mounts a profile VHD from SMB storage such as Azure Files or Azure NetApp Files at sign-in. Containers are not backups, do not hold operating system files, and do not need local administrator rights on endpoints.

Cloud Cache writes profile data to a local cache and can synchronise to several storage targets. The Office container stores Office data only, Redirections.xml controls folder redirection, and Image Builder creates images.

Excluding cache paths and redirecting folders keeps the container small. Screen resolution, update settings and extra network adapters do not affect what is stored in the profile.

MSIX app attach mounts application package images from a share, so the apps become available without installing them on every host. Windows Sandbox is an isolated temporary environment, checkpoints capture VM state, and Robocopy copies files.

Azure VM Image Builder automates customised image creation and can publish the result to Azure Compute Gallery. Advisor gives recommendations, Cost Management tracks spend, and the policy dashboard reports compliance.

Identity-based authentication and share-level RBAC roles let each user access only their own profile container. Sharing account keys, public IPs and local administrator rights are unnecessary and unsafe.

Azure Virtual Desktop Insights uses Azure Monitor and Log Analytics to show host health, connection activity and performance. Advisor gives recommendations, budgets track spend, and DNS analytics is not an AVD view.

Diagnostic settings send AVD connection and host records, and the Azure Monitor agent supplies performance counters, to Log Analytics for Insights. Print spooler logs, storage keys and macro logs are not AVD Insights sources.

Log Analytics queries use Kusto Query Language. T-SQL belongs to SQL databases, PowerShell DSC configures machine state, and Bicep defines infrastructure templates.

AVD Insights exposes connection quality and round-trip measurements. Advisor cost recommendations, private DNS zones and storage lifecycle rules do not describe session quality.

Scheduled maintenance combined with drain mode keeps hosts patched while limiting disruption. Midday restarts interrupt users, disabling updates leaves hosts exposed, and reactive patching is unsafe.

Alert rules on logs or metrics fire when a threshold is met and then notify through an action group. Action groups only deliver notifications, workbooks display data, and Service Health covers Azure platform events.