AZ-140 Complete Guide: Azure Virtual Desktop Specialty — Exam Scope, Learning Resources, and Pass Strategy

Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) is a Specialty-tier certification for engineers who design, deploy, and operate VDI (Virtual Desktop Infrastructure) / DaaS (Desktop as a Service) environments centered on Azure Virtual Desktop (AVD, formerly Windows Virtual Desktop). Since the post-pandemic surge in remote work drove a sharp rise in AVD projects, AZ-140 has become a flagship certification that proves market value as a VDI / EUC (End-User Computing) specialist engineer. In Japan, AVD adoption is advancing in SI firms (NTT Data, NEC, Fujitsu) and IT departments of large enterprises, and demand for AZ-140 holders remains steadily high.

This article walks through the AZ-140 exam specifications, the position of Specialty certifications, the 6-domain structure, when to choose AVD vs Windows 365, a 3-month pass roadmap, and where to go after passing. For dedicated AVD SEs / SI engineers, this certification is essentially 'an extension of day-to-day work', and the relatively light study load is a defining characteristic.

AZ-140 Exam Specifications

AZ-140 follows the standard Specialty-tier specifications.120 minutes, 40-60 questions, passing score 700 / 1000, USD 165 / JPY 21,103, valid 12 months (renewable via renewal assessment). You can take it via Pearson VUE OnVUE online or at a test center, with multi-language support including Japanese. No prerequisite certification is required; AZ-104 (Administrator)-level fundamentals are enough to take it on. Question formats include multiple choice plus PowerShell command reading, AVD portal UI scenario questions, and case studies, with most questions asking about implementation calls such as host pool design, FSLogix configuration, and cost optimization.

Domain 1: Design an Azure Virtual Desktop Architecture (10-15%)

This domain covers up-front design of the AVD environment. Core topics: assessment and sizing (Microsoft Virtual Desktop Optimization Tool, user profile capacity estimation, concurrent user calculation), subscription / region design (including DR design), network requirements (RDP Shortpath, UDP optimization, QoS), storage requirements (choosing between Azure Files, Azure NetApp Files, and Storage Spaces Direct), and identity strategy (Microsoft Entra Join vs Hybrid Join vs Domain Join, using Microsoft Entra Domain Services). The trap in this domain is choosing between Pooled and Personal host pools: Pooled when cost optimization is the priority (FSLogix handles multi-user), Personal when per-user apps / customization are critical. You need practice reading those signals out of the requirements.

Domain 2: Design for User Identities and Profiles (10-15%)

This domain covers profile management for AVD users. Core topics: FSLogix Profile Container configuration (when to use Office 365 Container, Cloud Cache, performance tuning), OneDrive for Business Known Folder Move integration, hybrid identity strategy, choosing Microsoft Entra Join vs Hybrid Join (recently, Microsoft Entra Join is increasingly recommended for AVD), and profile capacity management (VHDX size limits, auto-expansion). FSLogix is effectively the heart of AVD, and this domain digs into it deeply. Understanding Office 365 cache optimization, Outlook OST file management, and OneDrive integration best practices is what creates the score gap.

Domain 3: Implement an Azure Virtual Desktop Infrastructure (40-45%, the most important)

This is the highest-weighted core domain and has the biggest impact on whether you pass or fail. Core topics: host pool creation (Personal vs Pooled, Validation Environment), session host deployment (Azure VM sizing, Spot Instance usage), application groups (Desktop or RemoteApp), Workspace management, image management (Azure Compute Gallery, Image Builder, Custom Image Template, automated builds), MSIX App Attach (on-demand app package delivery), App Attach (the MSIX App Attach successor introduced in 2024), RemoteApp publishing, and host pool update strategy (Update Manager integration).

Domain 4: Manage Access and Security (10-15%)

This domain covers the security layer of AVD. Core topics: granting access to host pools / application groups via Azure RBAC, applying Conditional Access to the AVD client app, enforcing MFA, host pool RDP properties (controlling clipboard / printer / USB redirection), protecting AVD hosts with Microsoft Defender for Endpoint, Just-in-Time admin privileges via Privileged Identity Management (PIM), and Storage Account security (protecting the FSLogix profile location).

Domain 5: Manage User Environments and Apps (15-20%)

This domain covers day-to-day operations from the end-user perspective. Core topics: application packaging (choosing and delivering MSI / MSIX / AppV packages), Office / Microsoft 365 Apps AVD optimization (Shared Computer Activation, Outlook OST placement), roaming profile management, customizing Start menu / taskbar / default apps, integrating Microsoft Intune with AVD (Win11 host management, Configuration Profile), language / locale settings, and printer / redirection configuration.

Domain 6: Monitor and Maintain an Azure Virtual Desktop Infrastructure (10-15%)

This domain covers the operations phase of AVD. Core topics: Azure Virtual Desktop Insights workbooks (visualizing connection success rate, session performance, and host load via Azure Monitor integration), scaling plans (time-of-day-based auto-scaling, Spot VM usage), auto-shutdown (auto-stopping Personal hosts for cost reduction), FSLogix troubleshooting, host pool upgrade strategy, cost management (Reserved Instances, Spot VMs, sizing optimization), and automated AVD deployment via Bicep / ARM templates.

When to Use AVD vs Windows 365

Choosing between the two is a frequently tested decision point on this exam.

AZ-140 is AVD-centric, but recent revisions include a small portion of Windows 365 content.

3-Month Pass Roadmap

A 3-month plan assuming AZ-104 already in hand + Windows Server operations experience.Month 1: Work through the Architecture / Identity portions of the Microsoft Learn AZ-140 path; build a baseline AVD environment on a free Azure account (Resource Group, VNet, host pool, session host, Workspace).Month 2: Dive into the implementation domain — configure an FSLogix Profile Container on Azure Files, build one custom image with Image Builder, validate MSIX App Attach behavior, and write a PowerShell deployment script.Month 3: Study security / monitoring / app management; analyze performance with AVD Insights workbooks; implement a scaling plan; iterate on the official Practice Assessment until you reliably hit 80%. AVD beginners should add 1-2 months of Windows Server / RDP / VDI fundamentals up front — a 4-5 month plan is realistic.

Where to Go After AZ-140

The standard progression for AVD specialist engineers: AZ-104 + AZ-305 for Azure-wide design skills → AZ-700 (Network) to deepen the AVD-critical network design layer → SC-300 (Identity Admin) to strengthen AVD identity integration. For Microsoft 365 integration, MD-102 (Microsoft 365 Endpoint Administrator Associate) strengthens the Intune / Autopilot story. In End-User Computing (EUC), pairing with Citrix CCA-V or VMware End-User Computing certifications is also valued on multi-vendor VDI / DaaS engagements. AZ-140 increasingly appears as a required or recommended qualification in senior EUC engineer / VDI consultant roles in the JPY 7M-10M salary band.

Frequently Asked Questions

Exam information in this article is based on the official Microsoft Learn AZ-140 page and the Azure Virtual Desktop Documentation. This article is not an official Microsoft Corporation product and has no partnership or sponsorship relationship. Microsoft, Azure, Azure Virtual Desktop, and Windows 365 are trademarks of the Microsoft group of companies. Information reflects the official public materials as of May 24, 2026. Always confirm the latest information on the official pages.