- AZ-140 Domain Overview: How Microsoft Weights the Exam
- Domain 1: Plan and Implement an Azure Virtual Desktop Infrastructure (40-45%)
- Domain 2: Plan and Implement Identity and Security (15-20%)
- Domain 3: Plan and Implement User Environments and Apps (20-25%)
- Domain 4: Monitor and Maintain an Azure Virtual Desktop Infrastructure (10-15%)
- Question Format and What the 100 Minutes Actually Feel Like
- Mapping a Study Schedule to the Domain Weights
- Who Hires AZ-140 Holders and Which Domains Matter to Them
- Frequently Asked Questions
- Domain 1 (infrastructure) is 40-45% of AZ-140 - spend your first study weeks there.
- AZ-140 has 4 domains total; identity/security is smallest at 15-20%.
- Exam runs 100 minutes on Pearson VUE, online proctored or test center, passing score is 700.
- No formal prerequisite exists, but hands-on Azure compute, networking, identity, and storage experience is assumed.
AZ-140 Domain Overview: How Microsoft Weights the Exam
The AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop exam is built around four content areas, and Microsoft publishes explicit weight ranges for each. That weighting is not decorative - it's the single best planning tool you have. If a domain represents 40-45% of the exam, it should consume roughly 40-45% of your study hours, not get the same one week you'd give a 10% domain.
This guide breaks down all four domains in the skills-measured document current for the July 20, 2026 update, explains what each one actually tests in practice, and shows how to sequence your prep so the heaviest-weighted material gets the most repetition. If you want the condensed version of this planning logic, see our AZ-140 Study Guide 2026: How to Pass on Your First Attempt, and if you're still deciding whether this cert fits your career path, start with Is the AZ-140 Certification Worth It? Complete ROI Analysis 2026.
| Domain | Weight | Core Focus |
|---|---|---|
| 1. Plan and implement an Azure Virtual Desktop infrastructure | 40-45% | Host pools, session hosts, networking, storage, scaling |
| 2. Plan and implement identity and security | 15-20% | Identity providers, RBAC, Conditional Access, security baselines |
| 3. Plan and implement user environments and apps | 20-25% | FSLogix, MSIX app attach, RemoteApp, user profile management |
| 4. Monitor and maintain an Azure Virtual Desktop infrastructure | 10-15% | Azure Monitor, Log Analytics, update management, disaster recovery |
Domain 1: Plan and Implement an Azure Virtual Desktop Infrastructure (40-45%)
This is the largest domain by a wide margin, and it's where most exam questions live. It covers the actual mechanics of standing up Azure Virtual Desktop: creating and configuring host pools, deploying session hosts, designing network topology, and managing storage for FSLogix and general workloads.
Domain 1: Infrastructure Planning and Implementation
Candidates must understand how to design an AVD environment end-to-end, not just click through the deployment wizard once.
- Configuring pooled vs. personal host pools and choosing load-balancing algorithms
- Creating session host images with Azure Image Builder or custom VM images
- Planning virtual networks, hub-and-spoke connectivity, and Azure Virtual Desktop-specific DNS requirements
- Sizing and configuring Azure Files or Azure NetApp Files for profile storage
- Implementing autoscale and scaling plans to manage session host costs
Because this domain is so heavily weighted, expect scenario questions that combine multiple sub-skills - for example, a question that requires you to pick the correct storage tier and the correct network configuration for a described workload. This is also the domain most tied to real Azure infrastructure fundamentals, which is why Microsoft assumes prior experience with Azure compute, networking, and storage rather than teaching it from zero. Our dedicated breakdown, AZ-140 Domain 1: Plan and Implement an Azure Virtual Desktop Infrastructure - Complete Study Guide 2026, walks through every sub-topic in more depth.
Key Takeaway
If you only have time to master one domain deeply before exam day, make it Domain 1 - it can determine whether you clear the 700 passing score on its own weight alone.
Domain 2: Plan and Implement Identity and Security (15-20%)
This is the smallest domain, but it's not optional filler - identity and security questions test whether you understand how AVD interacts with Microsoft Entra ID, hybrid identity, and access control at both the Azure resource and session host level.
Domain 2: Identity and Security
Expect questions on configuring identity providers correctly for different AVD deployment models and applying least-privilege access.
- Configuring Microsoft Entra ID, Entra hybrid join, and Active Directory Domain Services for session hosts
- Assigning Azure role-based access control (RBAC) roles at the correct scope (subscription, resource group, host pool)
- Implementing Conditional Access policies for AVD client connections
- Configuring Multi-Factor Authentication for AVD sessions
- Applying security baselines and hardening session hosts
Because this domain carries the lowest weight range, it's tempting to skip it in favor of Domain 1 - but skipping it entirely is a common reason candidates fall just short of 700. A deeper walkthrough is available in AZ-140 Domain 2: Plan and Implement Identity and Security - Complete Study Guide 2026.
Domain 3: Plan and Implement User Environments and Apps (20-25%)
This domain is where AVD stops being "just Azure VMs" and becomes a true virtual desktop product. It covers user profile management, application delivery, and the client-side experience that end users actually interact with.
Domain 3: User Environments and Application Delivery
Candidates need working knowledge of FSLogix configuration details, not just the concept of profile containers.
- Configuring FSLogix Profile Containers and Office Containers, including exclusions and cloud cache
- Deploying and updating applications using MSIX app attach
- Publishing RemoteApp programs vs. full desktop sessions
- Configuring user experience settings via Group Policy or Intune (screen capture protection, watermarking, device redirection)
- Managing supported AVD clients across Windows, web, and mobile platforms
Expect scenario-based questions where the "correct" answer depends on subtle constraints - for example, whether MSIX app attach or traditional app installation is appropriate given a described host pool type. This domain rewards hands-on lab time more than reading alone. See AZ-140 Domain 3: Plan and Implement User Environments and Apps - Complete Study Guide 2026 for a topic-by-topic checklist.
Domain 4: Monitor and Maintain an Azure Virtual Desktop Infrastructure (10-15%)
The final domain covers ongoing operations - what happens after deployment. It's the smallest domain in terms of question volume, but it tests skills that map directly to real job responsibilities.
Domain 4: Monitoring and Operations
This domain assumes you can keep an AVD environment healthy over time, not just deploy it once.
- Configuring Azure Monitor and AVD Insights for session host and connection health
- Writing and interpreting Log Analytics queries for AVD diagnostics
- Planning and executing update management for session host images
- Configuring backup and disaster recovery for AVD environments
- Troubleshooting common connection and performance issues
Because this domain sits at 10-15%, some candidates deprioritize it - but its content overlaps heavily with Domain 1's infrastructure concepts, so studying it reinforces earlier material rather than adding a separate burden. Full coverage is in AZ-140 Domain 4: Monitor and Maintain an Azure Virtual Desktop Infrastructure - Complete Study Guide 2026.
Question Format and What the 100 Minutes Actually Feel Like
AZ-140 is delivered through Pearson VUE, with both online proctored and physical test-center options, and the proctored assessment runs 100 minutes and may include interactive components - meaning you shouldn't assume every question is multiple choice. Expect a mix of:
- Scenario-based multiple choice and multiple answer questions tied to a described AVD environment
- Drag-and-drop or ordering questions (common for deployment sequences)
- Case-study style questions that reference a shared scenario across several items
- Possible interactive/lab-style components testing configuration steps directly
The passing score is 700, scored on Microsoft's standard 1-1000 scale, and there's no formal prerequisite listed for registration - though Microsoft is explicit that the exam targets server or desktop administrators with Azure Virtual Desktop expertise and hands-on experience across Azure compute, networking, identity, storage, and resiliency. If you're unsure whether your current experience level is sufficient, our guide on How Hard Is the AZ-140 Exam? Complete Difficulty Guide 2026 breaks that down further, and AZ-140 Pass Rate 2026: What the Data Shows covers what's publicly known about outcomes.
Mapping a Study Schedule to the Domain Weights
Rather than studying domains in the order Microsoft lists them, build your schedule around weight and dependency. Domain 1 concepts (networking, storage, host pools) underpin Domains 3 and 4, so it makes sense to front-load it.
Domain 1 Deep Dive
- Build a lab host pool, configure networking and Azure Files storage
- Practice autoscale and scaling plan configuration
Domain 3 Build-Out
- Configure FSLogix profile containers in your lab environment
- Publish a RemoteApp and test MSIX app attach
Domain 2 Identity and Security
- Set up Entra ID join and hybrid join scenarios
- Apply Conditional Access and RBAC role assignments
Domain 4 Monitoring + Full Review
- Configure Azure Monitor and run Log Analytics queries against your lab
- Take a full-length practice exam on the AZ-140 practice test platform
This weighting-driven approach avoids the trap of spending equal time on all four domains just because a course outline presents them that way. For a more detailed week-by-week plan with review cycles, see the full AZ-140 Study Guide 2026.
Who Hires AZ-140 Holders and Which Domains Matter to Them
AZ-140 is aimed squarely at administrators managing remote desktop and application delivery infrastructure, and the domain weights reflect real job tasks rather than abstract theory. Organizations hiring for these roles typically care most about the skills tested in Domains 1 and 3 - deploying and maintaining the actual virtual desktop experience - while Domain 2 knowledge signals you can be trusted with access control in a multi-tenant cloud environment.
- Managed service providers deploying AVD for multiple clients lean heavily on Domain 1 and Domain 4 skills for repeatable, monitored deployments.
- Enterprise IT departments migrating from on-premises VDI or Citrix often prioritize Domain 3 expertise for user experience parity.
- Security-focused teams value Domain 2 knowledge for Conditional Access and identity governance in remote work scenarios.
To understand how this maps into job titles and compensation ranges, review AZ-140 Jobs and AZ-140 Salary Guide 2026: Complete Earnings Analysis. If you're still building foundational understanding of the credential itself, our explainer articles - What Is AZ-140?, AZ-140 Meaning, and What Does AZ-140 Stand For? - cover the basics before you dive into domain-level prep.
Key Takeaway
Employers rarely ask "did you pass AZ-140?" in isolation - they ask what you can configure. Knowing the domain breakdown helps you speak to specific, job-relevant skills in interviews, not just exam trivia.
Frequently Asked Questions
Four: Plan and implement an Azure Virtual Desktop infrastructure (40-45%), Plan and implement identity and security (15-20%), Plan and implement user environments and apps (20-25%), and Monitor and maintain an Azure Virtual Desktop infrastructure (10-15%).
Domain 1 (infrastructure) is the largest at 40-45% and underpins concepts used in Domains 3 and 4, so most candidates get the best return studying it first and in the most depth.
No formal prerequisite is listed. Microsoft simply targets candidates who are server or desktop administrators with Azure Virtual Desktop expertise and hands-on experience across Azure compute, networking, identity, storage, and resiliency.
The proctored assessment time is 100 minutes and may include interactive components. The passing score is 700 or greater on Microsoft's standard scale.
No. Certification renewal happens every 12 months via a free online Microsoft Learn renewal assessment, not a repeat of the full proctored exam.
Understanding the exact weight and scope of each AZ-140 domain turns exam prep from guesswork into a targeted plan. Pair this breakdown with focused lab practice and a run through realistic questions on our AZ-140 practice test platform to see how these domains show up in exam-style scenarios before test day.
- AZ-140 Domain 1: Plan and implement an Azure Virtual Desktop infrastructure (40-45%) - Complete Study Guide 2026
- AZ-140 Domain 2: Plan and implement identity and security (15-20%) - Complete Study Guide 2026
- AZ-140 Domain 3: Plan and implement user environments and apps (20-25%) - Complete Study Guide 2026
- AZ-140 Domain 4: Monitor and maintain an Azure Virtual Desktop infrastructure (10-15%) - Complete Study Guide 2026