AZ-140 logo
Focused certification exam prep
Start practice

AZ-140 Domain 4: Monitor and maintain an Azure Virtual Desktop infrastructure (10-15%) - Complete Study Guide 2026

TL;DR
  • Domain 4 is worth 10-15% of AZ-140, the smallest weighting of the four domains.
  • Expect scenario questions on Azure Monitor, Log Analytics, and AVD Insights dashboards.
  • Autoscale scaling plans and session host update/maintenance tasks are heavily tested here.
  • The exam is 100 minutes at 700/1000 to pass, delivered via Pearson VUE.

Domain 4 Overview: What "Monitor and Maintain" Really Means

Domain 4, Monitor and maintain an Azure Virtual Desktop infrastructure, carries a 10-15% weighting on the AZ-140 exam - the lightest of the four official domains, but far from optional. Where Domain 1's planning and implementation content gets the most exam real estate, Domain 4 tests whether you can keep a live AVD environment healthy after it's already deployed. That distinction matters because the question style shifts: instead of "how would you design this," you get "this environment is already running and something is wrong or inefficient - what do you check first?"

If you've already read the full breakdown of all four content areas, you know Domain 4 sits alongside identity/security (15-20%) and user environments/apps (20-25%) as the operational counterweight to infrastructure planning. This guide goes deep on that one domain specifically, since it's the section candidates most often under-prepare for - it feels "easier" on paper because of the lower percentage, but the tooling knowledge it demands (Log Analytics queries, KQL basics, alert rule logic) trips up people who studied deployment steps but skipped operations.

Why Domain 4 Surprises People: Candidates often memorize how to build a host pool but never actually configure Azure Monitor alert rules or read AVD Insights charts during their labs. Domain 4 questions assume you've operated an environment, not just deployed one.

Skills Measured: The Official Sub-Topics

Microsoft groups Domain 4 into a handful of practical operational competencies. Based on the current skills outline (aligned to the July 2026 English exam update), expect coverage across these areas:

Monitor Azure Virtual Desktop

You need to configure and interpret monitoring data for the entire AVD stack - host pools, session hosts, and user sessions.

  • Configure Azure Monitor for AVD, including diagnostic settings and Log Analytics workspaces
  • Use AVD Insights to identify performance bottlenecks and connection failures
  • Interpret session host and user session performance counters
  • Configure alert rules for host pool health and capacity thresholds

Manage and maintain session hosts

This covers keeping the underlying VMs healthy, patched, and correctly sized over time.

  • Manage OS and application updates across session hosts
  • Manage session host drain mode and user session reassignment
  • Scale session host compute resources based on monitoring data
  • Automate scheduled maintenance windows without disrupting active users

Automate and configure scaling

Cost control and elasticity are recurring exam themes tied to real business scenarios.

  • Configure scaling plans and autoscale schedules for pooled host pools
  • Understand ramp-up, peak, ramp-down, and off-peak scaling behaviors
  • Troubleshoot why VMs fail to deallocate or start on schedule

Core Monitoring Tools You Must Know Cold

Domain 4 questions live and die on tool-specific knowledge. You should be comfortable, without hesitation, with the following stack:

  • Azure Monitor for Azure Virtual Desktop (AVD Insights): the purpose-built dashboard that surfaces host pool health, session data, and connection metrics - know what each workbook tile represents.
  • Log Analytics workspaces: understand how diagnostic settings route AVD data (connection logs, host pool logs, feed logs) into a workspace, and know basic KQL query structure well enough to interpret sample query results in a question stem.
  • Data collection rules (DCRs): how they control which performance counters and event logs get collected from session hosts.
  • Alert rules and action groups: how to configure a metric alert on session host CPU or available memory and route it to an action group for notification or automated remediation.
  • Update management via Azure Update Manager: scheduling patch deployment across session host pools without breaking active sessions.

Key Takeaway

Don't just memorize tool names - practice actually building a Log Analytics query and reading an AVD Insights workbook. Domain 4 questions frequently show you a partial screenshot or log snippet and ask you to interpret it.

Session Host and Image Maintenance

A large share of Domain 4's practical weight sits in ongoing session host lifecycle management. This overlaps slightly with the image and host pool creation content in Domain 1, but the Domain 4 angle is maintenance, not initial build. Concrete topics to master:

  • Putting session hosts into drain mode before maintenance and understanding how existing user sessions are handled
  • Using Azure Compute Gallery to version and roll out updated golden images to existing host pools
  • Removing and re-adding session hosts to a host pool without losing FSLogix profile continuity (a concept that also touches Domain 3's user environment content)
  • Monitoring disk, network, and CPU pressure metrics to decide when a session host needs resizing
  • Validating that scheduled agent updates (RDAgent, side-by-side stack) haven't broken connectivity
Cross-Domain Overlap Reminder: Domain 4 questions often blend into identity and profile topics. If a session host maintenance scenario mentions FSLogix or Conditional Access, you're really being tested on how domains interact - a pattern also discussed in the identity and security domain guide.

Autoscale, Scaling Plans, and Automation Tasks

Scaling logic is one of the most concrete, testable pieces of Domain 4 because it has clear, memorizable mechanics rather than open-ended judgment calls. You should be able to answer scenario questions covering:

  • The difference between scaling plans (built-in AVD autoscale) and custom Azure Automation-based scaling scripts
  • How ramp-up and ramp-down schedules calculate the number of session hosts needed based on active/disconnected session counts
  • Capacity thresholds and how they trigger new host pool VMs to start
  • Cost implications of leaving host pools running at off-peak capacity versus aggressive deallocation
  • Troubleshooting a scaling plan that isn't triggering - common causes include assignment to the wrong host pool, incorrect time zone configuration, or exclusion tags on session hosts
Scaling ConceptWhat It ControlsCommon Exam Angle
Scaling plan (native)Session host start/stop based on schedule + loadConfiguring ramp-up/ramp-down time windows correctly
Autoscale tags/exclusionsPrevents specific hosts from being deallocatedIdentifying why a "protected" host isn't scaling down
Azure Automation runbooksCustom scaling logic outside native scaling plansRecognizing when custom scripts are still needed
Diagnostic alertsNotification when scaling fails or capacity is exceededConnecting Log Analytics data to an alert rule

How Domain 4 Questions Are Actually Asked

AZ-140 is delivered through Pearson VUE (online proctored or test center) with a 100-minute time limit and a 700/1000 passing score, and it may include interactive components. For Domain 4 specifically, expect the interactive question types to appear more often than in the other domains, because monitoring and scaling scenarios lend themselves well to drag-and-drop sequencing, log-reading exercises, and best-answer scenario stems. Typical formats include:

  • Scenario + best answer: a description of a monitoring alert or performance complaint, followed by four remediation options where only one addresses the root cause rather than a symptom.
  • Ordered steps: arranging the correct sequence for patching session hosts using drain mode, scaling plans, and maintenance windows.
  • Log/metric interpretation: a short excerpt of Log Analytics query results or an AVD Insights chart, asking what it indicates about host pool health.
  • Configuration matching: matching a scaling plan setting or diagnostic setting to the outcome it produces.

If you want a broader sense of how difficult these interactive formats feel compared to standard multiple choice, the AZ-140 difficulty breakdown covers this in more detail, and the pass rate analysis discusses how domain weighting interacts with overall exam difficulty.

How Domain 4 Compares to the Other Three Domains

Understanding relative weighting helps you allocate study time honestly instead of spending equal hours on every domain.

DomainWeightPrimary Focus
Domain 1: Plan and implement AVD infrastructure40-45%Host pools, networking, storage, image builds
Domain 2: Plan and implement identity and security15-20%Conditional Access, RBAC, session security
Domain 3: Plan and implement user environments and apps20-25%FSLogix, MSIX, app delivery, Teams optimization
Domain 4: Monitor and maintain AVD infrastructure10-15%Azure Monitor, scaling plans, session host upkeep

Because Domain 4 is the smallest weight, it's tempting to deprioritize it entirely. That's a mistake: at 10-15% of a 100-minute exam, it can still represent a meaningful cluster of questions, and the tooling knowledge (Log Analytics, KQL basics) often reappears indirectly inside Domain 1 and Domain 2 questions about diagnostics. For the complete weighting rationale across all four areas, see the full exam domains guide.

Where Domain 4 Fits in Your Study Timeline

Because Domain 4 builds conceptually on host pools and session hosts from Domain 1, it makes sense to study it after infrastructure fundamentals are solid but before your final review pass, so you have time to actually configure monitoring and scaling in a lab rather than just reading about it.

Week 3

Monitoring Foundations

  • Deploy Log Analytics workspace and connect it to a test host pool
  • Explore AVD Insights workbooks and identify each metric category
  • Write and run three basic KQL queries against connection logs
Week 4

Scaling and Maintenance

  • Configure a scaling plan with custom ramp-up/ramp-down windows
  • Put a session host into drain mode and observe session reassignment
  • Schedule a patch deployment via Update Manager and verify it completes
Week 5

Integration Review

  • Combine Domain 4 monitoring scenarios with Domain 2 identity alerts
  • Practice interpreting sample log excerpts under timed conditions
  • Revisit any Domain 1 topics that intersect with scaling and images

This sequencing is a small slice of a full study plan - for the complete week-by-week structure covering all four domains, see the full AZ-140 study guide.

Who Actually Uses These Skills on the Job

Domain 4 content maps directly to day-two operations work, which means it's the part of AZ-140 that hiring managers scrutinize most when evaluating whether a candidate can actually run production AVD environments, not just deploy demo ones. Roles that lean heavily on these skills include cloud operations engineers, virtual desktop administrators, and managed service provider technicians responsible for ongoing AVD support contracts. Employers posting these positions often list Log Analytics, Azure Monitor, and patch management experience as explicit requirements - you can see this reflected in current listings referenced in the AZ-140 jobs overview.

Because there's no formal prerequisite for AZ-140 - Microsoft simply targets administrators with hands-on Azure compute, networking, identity, storage, and resiliency experience - building genuine Domain 4 lab skills is one of the clearest ways to close any experience gap before exam day. Structured courses covering monitoring and maintenance labs are outlined in the AZ-140 training resource guide, and if you're still deciding whether the credential justifies the investment, the ROI analysis and salary guide both factor in how operational skills like these translate into compensation.

Once certified, remember renewal happens every 12 months through a free Microsoft Learn assessment rather than a full retake - so the Domain 4 knowledge you build now has ongoing relevance, not a one-time payoff. For exam logistics like fees and registration, the certification cost breakdown covers the full pricing picture, and general background on the credential itself is available in the AZ-140 certification overview.

Before sitting the exam, it's worth running full-length practice questions that mix all four domains together, since real exam pacing rarely isolates one domain at a time. You can start building that timed practice habit on the main AZ-140 practice test platform, which includes scenario-style questions modeled on the monitoring and scaling content covered here. Working through a full practice exam before your scheduled test date is one of the fastest ways to confirm your Domain 4 readiness alongside the other three areas.

Frequently Asked Questions

How many questions on AZ-140 come from Domain 4?

Microsoft publishes domain weight as a percentage range (10-15%) rather than an exact question count, and the total question count per exam form isn't published either. Treat 10-15% as a proportion of the full 100-minute exam rather than a fixed number.

Is Domain 4 easier than the other AZ-140 domains?

Not necessarily easier, just narrower in scope. It carries the smallest weighting, but it requires specific hands-on familiarity with Azure Monitor, Log Analytics, and scaling plans that many candidates skip if they only study documentation instead of building a lab.

Do I need to know KQL in depth for Domain 4?

You don't need advanced KQL authoring skills, but you should be able to read and interpret basic query structures and results, since some questions present log excerpts and ask what they indicate about host pool or session health.

How does Domain 4 overlap with Domain 1 and Domain 2?

Session host maintenance in Domain 4 builds on host pool and image concepts from Domain 1, while alerting and diagnostic logging occasionally intersect with identity and security monitoring covered in Domain 2. Scenario questions sometimes blend these areas together.

What's the best way to practice Domain 4 before exam day?

Build a small lab host pool, connect it to Log Analytics, configure a scaling plan, and run through a full patch cycle using drain mode. Then reinforce that hands-on work with timed practice questions on the AZ-140 practice test site to get comfortable with the scenario-based question style.

Ready to pass your AZ-140 exam?

Put this into practice with free AZ-140 questions across every exam domain.