AZ-140 : Microsoft Certified: Azure Virtual Desktop Specialty Voucher

Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)

Overview

The Microsoft Certified: Azure Virtual Desktop Specialty certification validates your expert-level ability to plan, deliver, and manage virtual desktop experiences and remote apps on Microsoft Azure. As modern organizations shift toward remote and hybrid work environments, deploying scalable, secure, and performant virtualization platforms has become a critical IT priority. The AZ-140 exam focuses on implementing Azure Virtual Desktop (AVD) architecture, configuring host pools and session hosts, managing user profiles with FSLogix, securing identity and access, and optimizing ongoing system performance.

Earning this specialty credential demonstrates that you possess the advanced technical capabilities required to build resilient cloud-hosted workstation infrastructures that reduce operational overhead while maintaining a seamless user experience across any device.

Benefits

• Industry Recognition: Validates specialized domain expertise in architecting and running modern cloud virtualization solutions on Microsoft Azure.
• Enhanced Enterprise Value: Empowers organizations to deploy secure, compliant, and cost-effective remote desktop environments.
• Career Differentiation: Sets you apart from general cloud administrators by proving deep, focused skills in enterprise desktop virtualization and FSLogix technologies.
• Modern Workspace Enablement: Equips you to lead digital workplace modernization and facilitate smooth hybrid workforce transitions.
• Microsoft Credential Alignment: Adds an official specialty badge to your Microsoft Learn transcript, bolstering your professional profile on LinkedIn and technical resumes.

Who should take this exam

• Azure Administrators responsible for deploying and maintaining virtual desktop infrastructure.
• Virtual Desktop Infrastructure (VDI) Engineers transitioning on-premises Citrix or VMware Horizon workloads to native Azure Virtual Desktop.
• Enterprise Desktop Specialists looking to prove hands-on mastery in remote application streaming and session host scaling.
• System Engineers and Cloud Architects designing secure access, multi-session Windows environments, and profile management solutions.

Prerequisites

• Strong foundational knowledge of Azure core services, networking, storage, and identity management (equivalent to the AZ-104: Microsoft Azure Administrator level).
• Hands-on experience with virtualization technologies, remote desktop services, and Active Directory / Microsoft Entra ID integration.
• Working familiarity with Windows client operating systems (Windows 10 and Windows 11 Enterprise multi-session) and deployment automation tools.

Learning outcomes

• Design and configure Azure Virtual Desktop architecture, host pools, and session host images.
• Implement identity, authentication, and role-based access control with Microsoft Entra ID and Active Directory Domain Services.
• Configure advanced profile container storage solutions using FSLogix, Azure Files, and Azure NetApp Files.
• Deliver and manage packaged applications using MSIX app attach and App Attach technologies.
• Implement operational monitoring, business continuity, disaster recovery, and automated scaling for virtual desktop environments.

Career opportunities

• Azure Virtual Desktop Engineer
• Cloud Infrastructure Administrator
• Virtualization Systems Engineer
• Enterprise Workplace Architect
• End-User Computing (EUC) Specialist

Exam syllabus

Plan and Implement an Azure Virtual Desktop Infrastructure (25–30%)

• Plan an Azure Virtual Desktop architecture: Design host pools, compute sizing, storage architecture, network capacity, and multi-session Windows client scenarios.
• Implement and manage networking for AVD: Configure virtual networks, subnets, route tables, network security groups, and remote connection routing with Azure Virtual Desktop Shortpath.
• Configure storage for FSLogix and MSIX app attach: Create and configure Azure Files storage accounts, configure permissions, enable SMB Multichannel, and configure Azure NetApp Files.
• Create and configure host pools and session hosts: Automate host pool creation (pooled vs. personal), configure assignments, deploy custom VM images from Azure Compute Gallery, and automate session host provisioning.

Plan and Implement Identity and Security (15–20%)

• Plan and implement identity and authentication: Integrate hybrid identities using Microsoft Entra Connect, configure Microsoft Entra join / Microsoft Entra hybrid join, and assign Azure role-based access control (RBAC) roles for Azure Virtual Desktop.
• Implement and manage security: Configure Conditional Access policies including Multi-Factor Authentication (MFA), configure session host security baselines with Microsoft Intune, manage Microsoft Defender for Endpoint integration, and manage administrative credentials via Privileged Identity Management.

Plan and Implement User Environments and Apps (20–25%)

• Plan and implement FSLogix: Deploy and configure FSLogix Profile Containers, Office Containers, Cloud Cache for high availability, and configure FSLogix directory exclusions.
• Configure user experience settings: Implement Universal Print, configure Remote Desktop Protocol (RDP) properties for session pools, configure redirection options (clipboard, drive, audio, camera), and apply Group Policies and Intune configuration profiles.
• Install and configure apps on session hosts: Deploy applications to session hosts, configure RemoteApp programs, publish applications to users, and implement MSIX app attach application packages.

Monitor and Maintain an Azure Virtual Desktop Infrastructure (20–25%)

• Plan and implement business continuity and disaster recovery: Design multi-region disaster recovery solutions, configure backup for virtual machines using Azure Backup, and replicate FSLogix profile storage across regions.
• Automate management tasks: Configure Azure Virtual Desktop autoscaling policies, manage scheduled host pool scaling plans, and automate routine operational maintenance with Azure Automation or PowerShell.
• Monitor and troubleshoot AVD services: Monitor session hosts, connections, and latency using Azure Monitor Insights for Azure Virtual Desktop, analyze Log Analytics workspaces, troubleshoot client connection failures, and resolve FSLogix profile mounting errors.