AZ-140 study guide · 2026

The 4 AZ-140 domains, explained

4 domains and 12 official functional groups. Plan and implement an Azure Virtual Desktop infrastructure carries the most weight at 40–45%. Each guide explains what the domain covers, how its questions are framed and where candidates lose marks.

Questions
Not published (Microsoft exams typically 40–60, varies)
Time
100 minutes
Passing score
700 / 1000
Outline
AZ-140 study guide, skills measured as of 20 July 2026 (current)

Exam blueprint

Bar widths follow the official weights, scaled to fit the bar. Weight ranges are drawn at their midpoint.

  1. 1 40–45% Domain 1: Plan and implement an Azure Virtual Desktop infrastructure, 40–45%
  2. 2 15–20% Domain 2: Plan and implement identity and security, 15–20%
  3. 3 20–25% Domain 3: Plan and implement user environments and apps, 20–25%
  4. 4 10–15% Domain 4: Monitor and maintain an Azure Virtual Desktop infrastructure, 10–15%
  1. 1 Plan and implement an Azure Virtual Desktop infrastructure
  2. 2 Plan and implement identity and security
  3. 3 Plan and implement user environments and apps
  4. 4 Monitor and maintain an Azure Virtual Desktop infrastructure

All 4 domains

12 official functional groups 70–92 hrs suggested study

  1. Domain 01 40–45%

    Plan and implement an Azure Virtual Desktop infrastructure

    The heaviest AZ-140 domain: design networking and storage for Azure Virtual Desktop, choose host pool types, operating systems and licensing, deploy session hosts by portal or code, and build and version golden images.

    Inside this domain

    • Plan, implement, and manage networking for Azure Virtual Desktop
    • Plan and implement storage for Azure Virtual Desktop user data
    • Plan host pools and session hosts
    • Implement host pools and session hosts
    • and 1 more functional groups

    Watch for Inbound port fix

    Functional groups
    5
    Questions est.
    19–23
    Study time est.
    30–38 hrs
  2. Domain 02 15–20%

    Plan and implement identity and security

    Choose how session hosts and users authenticate, apply least-privilege Azure RBAC and Conditional Access, and harden session hosts with Microsoft Defender, network controls, App Control for Business and Trusted Launch.

    Inside this domain

    • Plan and implement identity integration
    • Plan and implement security

    Watch for Missing VM login role

    Functional groups
    2
    Questions est.
    7–10
    Study time est.
    12–16 hrs
  3. Domain 03 20–25%

    Plan and implement user environments and apps

    Shape what users actually experience: FSLogix profile and Office containers, client choice and redirection, RDP and timeout settings, Start VM on Connect, application groups, Microsoft 365 Apps, Teams and App attach.

    Inside this domain

    • Plan and implement FSLogix
    • Plan and implement user experience and client settings
    • Install and configure apps on a session host

    Watch for Wrong layer for redirection

    Functional groups
    3
    Questions est.
    10–13
    Study time est.
    18–24 hrs
  4. Domain 04 10–15%

    Monitor and maintain an Azure Virtual Desktop infrastructure

    Keep Azure Virtual Desktop healthy after go-live: collect logs, use Azure Virtual Desktop Insights, tune capacity with autoscale, manage active sessions, patch session hosts, and plan backup, multi-region and disaster recovery.

    Inside this domain

    • Monitor and manage Azure Virtual Desktop services
    • Plan and implement updates, backups, and disaster recovery

    Watch for Runbook over scaling plan

    Functional groups
    2
    Questions est.
    5–8
    Study time est.
    10–14 hrs

Try one

Practice questionDomain 1: Plan and implement an Azure Virtual Desktop infrastructure

A company will deploy Azure Virtual Desktop session hosts in two Azure regions. Hosts must use Trusted Launch, and a new image version must be built automatically every month with the latest updates. Which combination should the administrator implement?

Choose one answer

One trap from every domain

The answer that looks right, and the clue that gives it away.

  • Domain 1

    Inbound port fix

    Clue Look for mentions of the required URL list or outbound rules.

  • Domain 2

    Missing VM login role

    Clue The hosts are Microsoft Entra joined.

  • Domain 3

    Wrong layer for redirection

    Clue Requirement applies to every user of a host pool.

  • Domain 4

    Runbook over scaling plan

    Clue Requirement asks for a built-in or supported feature.

Other Cloud Computing certifications

Study guides for exams that overlap with AZ-140.

Practise what you read

AZ-140 domains: common questions

How many domains are in the AZ-140 exam?

AZ-140 has 4 domains with 12 official functional groups between them: Plan and implement an Azure Virtual Desktop infrastructure, Plan and implement identity and security, Plan and implement user environments and apps and Monitor and maintain an Azure Virtual Desktop infrastructure.

Which AZ-140 domain carries the most weight?

Plan and implement an Azure Virtual Desktop infrastructure is the heaviest at 40–45%, followed by Plan and implement user environments and apps (20–25%). The lightest is Monitor and maintain an Azure Virtual Desktop infrastructure (10–15%). Weights come from Microsoft's official outline.

What is the AZ-140 exam format?

Questions: Not published (Microsoft exams typically 40–60, varies). Time allowed: 100 minutes. Passing score: 700 / 1000.

How long should I study for AZ-140?

Our planning estimate is 70–92 hrs across all domains, split by weight. It is an editorial estimate, not an official figure, so adjust it to your experience and to how you score on practice questions.

Where should I start?

Start with Plan and implement an Azure Virtual Desktop infrastructure, because it carries the most marks, then work down by weight. Use the checklist on each domain page to confirm you can do what the domain asks before moving on.

Which outline is this guide based on?

This guide follows AZ-140 study guide, skills measured as of 20 July 2026 (current), published by Microsoft. It was last reviewed in October 2026.

Domain names, weights and functional groups come from Microsoft's official outline (AZ-140 study guide, skills measured as of 20 July 2026 (current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.