AZ-140 Practice Test

Sample AZ-140 Practice Questions

10 real questions from the free AZ-140bank. Pick an answer in your head, then open “Show answer” for the explanation.

1. 1. Which PowerShell cmdlet is required to create a QoS policy that targets UDP 3391 on AVD session hosts?

   • A. New-NetQosPolicy
   • B. Set-NetQosPolicy
   • C. Add-NetQosPolicy
   • D. Enable-NetQosPolicy
   Show answer

   Correct answer: A

   New-NetQosPolicy creates a new Quality of Service policy at the OS level and can be scripted via the AVD host pool extension sequence to automatically configure session hosts.

2. 2. Which method does Microsoft's official documentation specify for enabling the RDP Shortpath listener used by 'RDP Shortpath for managed networks' on Azure Virtual Desktop session hosts?

   • A. Manually create and set a custom registry value under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations named EnableShortpath
   • B. Enable it automatically the first time a client attempts a UDP connection; no administrative configuration is documented or required
   • C. Enable the RDP Shortpath listener on session hosts using Microsoft Intune or Group Policy in an Active Directory domain, and allow an inbound port (UDP 3390 by default) to accept connections
   • D. Edit the RDP-Tcp listener's PortNumber value under the same WinStations registry key used to change the classic RDP port
   Show answer

   Correct answer: C

   Microsoft's 'Configure RDP Shortpath for Azure Virtual Desktop' documentation states that for RDP Shortpath for managed networks you need to enable the RDP Shortpath listener on your session hosts and open an inbound port to accept connections, doing this using Microsoft Intune or Group Policy in an Active Directory domain -- not by manually authoring a specific registry DWORD.

3. 3. An enterprise wants to reduce Azure data-transfer costs for 200 Europe-based users who currently connect to US-East session hosts over the public Internet. Which three-step networking design is MOST cost-effective while keeping latency low?

   • A. Enable ExpressRoute Global Reach on the existing US VNet
   • B. Enable Azure Front Door for RDP traffic
   • C. Increase host VM size in US-East
   • D. Deploy new hosts in West Europe VNet, enable RDP Shortpath, and switch users to the new region
   Show answer

   Correct answer: D

   Regional placement in West Europe eliminates long-haul egress, and RDP Shortpath provides direct UDP transport with minimal data-processing charges.

4. 4. Your AVD deployment sends all Windows Security Event logs from session hosts to Log Analytics, incurring excessive ingestion costs. You want to retain only EventID 4624 and 4625 (authentication events) and discard all other security events before they reach the workspace. Which approach achieves ingestion-time filtering?

   • A. Configure a Log Analytics workspace daily cap set to the expected volume of authentication events
   • B. Create a Diagnostic Setting filter on the session host VMs to exclude security event categories below priority level 3
   • C. Enable a Log Analytics workspace archive tier for the security events and configure interactive retention to 14 days
   • D. Create a Data Collection Rule (DCR) with a KQL ingestion-time transformation that filters Windows Security Events to EventID 4624 and 4625
   Show answer

   Correct answer: D

   A Data Collection Rule with a KQL ingestion-time transformation (D) filters Windows Security Events to EventID 4624/4625 before commit, cutting billable ingestion. A daily cap (A) pauses all ingestion once reached, not selective filtering. A diagnostic setting filter (B) cannot filter by EventID this way. The archive tier (C) lowers cold-storage cost but does not prevent ingestion.

5. 5. What default UDP port is used by RDP Shortpath once enabled?

   • A. 3389
   • B. 3390
   • C. 3391
   • D. 3392
   Show answer

   Correct answer: B

   RDP Shortpath uses UDP 3390 for direct connectivity, which is distinct from the traditional TCP 3389 RDP port.