The Microsoft Certified: Azure Virtual Desktop Specialty certification validates that you can plan, deliver, manage, and monitor Azure Virtual Desktop experiences and RemoteApps for end users. AZ-140 is Microsoft’s role-based specialty exam for practitioners who work directly with session hosts, host pools, user profiles, app delivery, identity integration, and operational maintenance in Azure Virtual Desktop.
This is not a generic Windows administration exam and it is not a pure Azure infrastructure exam. Microsoft is testing whether you can operate Azure Virtual Desktop end to end, including network readiness, storage for user profiles, host pool design, image lifecycle, FSLogix, session host security, client experience, application delivery, and observability.
As of May 28, 2026, Microsoft positions AZ-140 for server and desktop administrators who have experience with Azure compute, networking, identity, storage, and resiliency, and who can manage end-user desktop environments with the Azure portal, templates, scripting, and command-line tools.
Exam At a Glance
| Attribute | Value |
|---|---|
| Certification | Microsoft Certified: Azure Virtual Desktop Specialty |
| Exam code | AZ-140 |
| Level | Intermediate / Specialty |
| Duration | 100 minutes |
| Cost | $165 USD |
| Renewal | Every 12 months |
| Prerequisites | No formal prerequisite certification, but Microsoft expects server or desktop administration experience plus Azure compute, networking, identity, storage, and resiliency knowledge |
| Target candidate | Administrators designing, implementing, managing, and maintaining Azure Virtual Desktop environments and RemoteApps |
| Primary focus | Azure Virtual Desktop infrastructure, identity and security, user environments and apps, and operational monitoring and maintenance |
- Official certification page: Microsoft Certified: Azure Virtual Desktop Specialty
- Official exam page: Exam AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop
- Official study guide: AZ-140 study guide
- Official course: Configure and Operate Microsoft Azure Virtual Desktop
- Official learning paths: Plan an Azure Virtual Desktop implementation, Implement an Azure Virtual Desktop infrastructure, Manage access and security for Azure Virtual Desktop, Manage user environments and apps for Azure Virtual Desktop, Monitor and maintain an Azure Virtual Desktop infrastructure
- Official practice assessment: AZ-140 practice assessment
Official Assessed Areas
- Plan and implement an Azure Virtual Desktop infrastructure
- Plan and implement identity and security
- Plan and implement user environments and apps
- Monitor and maintain an Azure Virtual Desktop infrastructure
AZ-140 is best treated as an operational platform exam. Microsoft is testing whether you can keep Azure Virtual Desktop usable, secure, and maintainable for real users over time, not whether you can provision one host pool once.
1. Plan and Implement an Azure Virtual Desktop Infrastructure
This domain covers the foundation of every Azure Virtual Desktop deployment: network, storage, host pools, session hosts, and image lifecycle.
- Networking for Azure Virtual Desktop - Study network capacity and latency requirements, session host network design, RDP Shortpath, RDP Multipath, QoS, Private Link, and connectivity troubleshooting. Official resources: AZ-140 study guide, Azure Virtual Desktop documentation.
- Storage for user data and profiles - Microsoft explicitly includes FSLogix component storage, storage accounts, file shares, and Azure NetApp Files for Azure Virtual Desktop user data. Official resources: Plan an Azure Virtual Desktop implementation, FSLogix overview.
- Host pools, session hosts, and image strategy - Be ready to recommend operating systems, licensing models, host pool architecture, performance and capacity planning, host creation methods, custom images, Azure VM Image Builder, and Azure Compute Gallery. Official resources: Implement an Azure Virtual Desktop infrastructure, AZ-140 study guide.
- This domain is about platform readiness - The right answer usually creates a stable, scalable Azure Virtual Desktop base that later identity, app, and operations decisions can depend on. Official resources: AZ-140 course, Certification overview.
Exam tip: If the scenario is about host pools, session host scale, user profile storage, or image creation, solve it as an infrastructure design question before you think about end-user features.
2. Plan and Implement Identity and Security
This domain covers how users authenticate, how access is granted, and how session hosts are protected.
- Identity integration - Review AD DS, Microsoft Entra ID, Microsoft Entra Domain Services, Azure RBAC, Conditional Access, authentication options, rights assignments, and single sign-on. Official resources: Manage access and security for Azure Virtual Desktop, What is Microsoft Entra ID?.
- Session host and connection security - Microsoft includes Defender for Cloud, Defender Antivirus, Defender for Endpoint, NSGs, UDRs, Azure Firewall, Bastion, JIT VM access, Windows threat protection features, confidential VMs, and Trusted Launch. Official resources: AZ-140 study guide, Microsoft Defender for Cloud overview.
- This domain is about safe access to desktop experiences - The best answer usually balances a clean sign-in experience with strong control of who can connect and how session hosts are protected. Official resources: Certification overview, AZ-140 course.
Exam tip: If the prompt mentions sign-in model, Conditional Access, RBAC, or session-host hardening, classify it as an identity-and-security question before you think about host pool design.
3. Plan and Implement User Environments and Apps
This domain focuses on the end-user experience: profiles, settings, clients, RemoteApps, and app delivery.
- FSLogix and profile strategy - Study profile containers, Office containers, Cloud Cache, application masking, and the operational tradeoffs of each option. Official resources: FSLogix concepts, Manage user environments and apps for Azure Virtual Desktop.
- User experience and client settings - Review client selection and deployment, device redirection, multimedia redirection, printing, Universal Print, Intune or Group Policy settings, RDP properties, session timeout settings, Start VM on Connect, and personal desktop assignment. Official resources: Azure Virtual Desktop clients, AZ-140 study guide.
- Application delivery and RemoteApps - Microsoft expects you to handle application groups, RemoteApp publishing, Microsoft 365 apps, OneDrive, Teams media optimization, browser support, and app attach packaging. Official resources: User environments and apps path, App attach overview.
- This domain is about usable desktop operations - The right answer usually improves consistency and user experience across profiles, app access, and desktop behavior rather than focusing only on infrastructure mechanics. Official resources: AZ-140 course, Certification overview.
Exam tip: If the question is about the user’s actual desktop experience, think profiles, client behavior, or application delivery before you think about networking or identity controls.
4. Monitor and Maintain an Azure Virtual Desktop Infrastructure
This final domain is about day-two operations: keeping the service healthy, observable, and recoverable.
- Monitoring and performance management - Review log collection, Azure Monitor, Azure Virtual Desktop Insights, custom workbooks, active-session management, capacity optimization, and autoscaling. Official resources: Monitor and maintain an Azure Virtual Desktop infrastructure, Azure Virtual Desktop Insights.
- Updates, backup, and disaster recovery - Microsoft includes update strategy, disaster recovery, multi-region planning, backup design, and backup and restore for profiles, personal desktops, and images. Official resources: Azure Backup overview, AZ-140 study guide.
- This domain is about sustainable operations - The exam rewards candidates who can keep Azure Virtual Desktop stable over time through visibility, lifecycle management, and resilience planning. Official resources: AZ-140 course, Certification overview.
Exam tip: If the scenario is about performance, session health, capacity, backup, or recovery, move immediately into the monitoring-and-maintenance domain.
Recommended 4-Week Study Plan
| Week | Focus | Primary resources |
|---|---|---|
| 1 | Network design, storage, host pools, session hosts, imaging | AZ-140 study guide, AVD implementation paths, Azure Virtual Desktop docs, FSLogix overview |
| 2 | Identity scenarios, RBAC, Conditional Access, session-host protection | Manage access and security path, Entra docs, Defender for Cloud docs |
| 3 | FSLogix, client settings, RemoteApps, Teams and Microsoft 365 app delivery | User environments and apps path, FSLogix docs, AVD client docs, app attach docs |
| 4 | Monitoring, Insights, autoscaling, updates, backup, disaster recovery, practice assessment | Monitoring and maintenance path, Azure Virtual Desktop Insights, Azure Backup docs, Microsoft practice assessment |
Last-Mile Exam Strategy
- Study AZ-140 as an operational ownership exam. The core skill is keeping Azure Virtual Desktop usable for real users, not just deploying the first environment.
- Spend extra time on host pools, images, FSLogix, and app delivery because those are the places where architecture and day-two administration meet.
- Do not isolate identity and security from user experience. Azure Virtual Desktop questions often hinge on how authentication, profile handling, and host behavior interact.
- Use Microsoft’s own practice assessment late in preparation to calibrate scenario wording and to expose weak areas across the four domains.
- When a question feels broad, classify it first as infrastructure, identity and security, user environment and apps, or monitoring and maintenance. That framing usually narrows the right answer quickly.
For adjacent context from this repo, pair this guide with our Azure Administrator Associate study guide for broader Azure operations background and our Azure Security Engineer Associate study guide for deeper security context around access and session host protection.
The fastest way to pass AZ-140 is to think like the administrator who owns the full remote desktop platform after rollout: design the host pool correctly, protect access, deliver a clean user environment, publish apps safely, and keep the service observable and recoverable over time.