AZ-140 exam pathFree assessment

AZ-140 Practice Tests That Find and Fix Your Weak Spots

5 practice tests, a 50-question timed simulation, and a free assessment.

Microsoft Certified: Azure Virtual Desktop Specialty

Find your AZ-140 gaps in 15 minutes.

Learner actions will appear after the current account is confirmed.

Official exam objectives effective Jul 20, 2026
Sample report preview

Preview the output before you study

Take a free assessment, see the decisions costing you points, or confirm where to validate breadth next instead of browsing a generic study list.

Sample readiness result630 / 1000

Know where you stand before another full practice test.

Sample top gapAzure Virtual Desktop access boundaries

Targeted repair: Fix a focused gap around application group access, host pool roles, and session-host permissions.

ReportTop gapsPass PlanTargeted repairsUnlocksPractice + Timed Exam
01Answer exam-style questions
02Work your Pass Plan
03Complete the final simulation
Try it

Answer one AZ-140 question

If you miss it, CramHQ identifies the decision you misunderstood, helps you fix it, then checks whether you can apply it in a different scenario.

A new pooled host pool uses session host configuration, an Azure Compute Gallery image, and FSLogix profiles. Although session hosts are rebuildable, weekend operations must stop compute charges and restart the same VM instances on Monday. Before security-agent changes, administrators must also create recovery points that can return an affected VM to its previous OS state. Which configuration should you choose?

  1. Use Standard SSD ephemeral OS disks; stop-deallocate hosts on weekends and use Azure Backup for per-VM recovery points.
  2. Use Standard SSD ephemeral OS disks; delete hosts on weekends, recreate them Monday, and use the gallery image as the recovery source.
  3. Use Standard SSD managed OS disks; stop-deallocate hosts on weekends and use Azure Backup for per-VM recovery points.
  4. Use Standard SSD managed OS disks; delete hosts on weekends, recreate them Monday, and use the gallery image as the recovery source.
Show the explanation

Managed OS disks retain OS data in Azure Storage, support the stop-deallocated state, and support Azure Backup. This preserves VM identity across weekends and enables recovery to a prechange OS state.

Try it now

Free AZ-140 practice questions

Eight practice questions from the CramHQ AZ-140 bank, with answers and explanations. No signup needed. When you are ready, start the free assessment. CramHQ ranks your weak spots across the whole exam by the points they cost, and your Pass Plan starts with the costliest.

Question 1 of 8Plan and implement an Azure Virtual Desktop infrastructure

After a new route table sends all session-host subnet outbound traffic to Azure Firewall, newly imaged hosts stay Unavailable. Existing users can sign in to the Windows App and see their assigned workspace. On a failed host, WVDAgentUrlTool reports blocked RD Broker and agent update URLs. Which action should you choose first?

  1. Add inbound NSG rules to the session-host subnet for TCP 443 and UDP 3478 from Internet, then restart the Remote Desktop Services Infrastructure Agent.
  2. Update branch proxy rules for Windows App clients to allow required Azure Virtual Desktop client endpoints, then have users refresh the workspace subscription.
  3. Update Azure Firewall policy for the session-host subnet to allow required Azure Virtual Desktop FQDNs and endpoints, including service traffic and agent update storage, then rerun WVDAgentUrlTool.
  4. Create a UDR exception for the WindowsVirtualDesktop service tag to bypass Azure Firewall, then leave the firewall policy unchanged and reimage unavailable hosts.
Show answer and explanation

Answer: C

The failure is on the session-host outbound path. Session hosts must reach required Azure Virtual Desktop service endpoints and agent update storage over outbound connectivity; WVDAgentUrlTool is the supported validation point.

“After a new route table sends all session-host subnet outbound traffic to Azure Firewall”

What to notice

This identifies the changed control point as outbound traffic from the session-host subnet, so the repair should focus on the firewall and routing path that owns host egress.

How to decide

Anchor the troubleshooting path on the subnet and traffic direction named in the stem before comparing options that change clients, inbound rules, or images.

If you picked A

Why it is tempting: TCP 443 and UDP 3478 sound related to remote connectivity, and restarting the agent looks like a registration repair.

Why it is wrong: For this registration and service path, session hosts need outbound reachability to required Azure Virtual Desktop endpoints; opening inbound Internet NSG rules does not fix blocked outbound FQDNs.

If you picked B

Why it is tempting: Client endpoint and workspace refresh steps are common when users cannot subscribe or launch from a client device.

Why it is wrong: Use client proxy or Windows App endpoint fixes for user-device subscription problems; use session-host outbound endpoint fixes when host-side diagnostics show blocked Azure Virtual Desktop service URLs.

If you picked D

Why it is tempting: A service-tag route exception sounds targeted, and reimaging can seem reasonable when newly imaged hosts are the ones failing.

Why it is wrong: Required Azure Virtual Desktop host connectivity can include multiple FQDNs and related dependencies, so the network control that blocks them must be updated rather than bypassed narrowly or ignored.

Question 2 of 8Plan and implement an Azure Virtual Desktop infrastructure

Users in a clinic subnet reach Azure Virtual Desktop session hosts through a site-to-site VPN and private IP routes. A firewall already permits UDP 3390 from the clinic subnet to the host subnet, but sessions still use reverse-connect TCP after public-network NAT traversal settings were enabled. Which change should you make?

  1. Enable the RDP Shortpath listener on the session hosts and use RDP Shortpath for managed networks over the VPN path.
  2. Configure RDP Shortpath for public networks with ICE/STUN and allow the session hosts outbound UDP to STUN endpoints.
  3. Apply DSCP markings for RDP traffic on the session hosts and prioritize UDP 3390 on the WAN devices.
  4. Configure RDP Shortpath for public networks via TURN and allow UDP 3478 to the Azure Virtual Desktop relay range.
Show answer and explanation

Answer: A

This fits the documented model for private client-to-session-host reachability. Managed-network Shortpath uses direct UDP to the session host, with the listener enabled and the allowed inbound UDP port.

“site-to-site VPN and private IP routes”

What to notice

This phrase establishes that the client-to-host path is private and routed, so the first decision is whether the option matches that network boundary.

How to decide

Identify whether the client reaches the session host over private routing or public connectivity before selecting the connection mode.

If you picked B

Why it is tempting: ICE/STUN is associated with public-network RDP Shortpath, so it can look relevant when sessions are still using reverse-connect TCP.

Why it is wrong: Use public-network ICE/STUN when the client reaches the session host through public connectivity, not when the scenario gives a private routed path with UDP allowed to the host subnet.

If you picked C

Why it is tempting: DSCP and WAN prioritization can improve traffic handling after a flow exists, and UDP 3390 appears in the same networking area.

Why it is wrong: Configure transport selection separately from QoS. DSCP marking can prioritize traffic, but it does not create a Shortpath route or enable the session-host listener.

If you picked D

Why it is tempting: TURN can help public-network Shortpath when direct UDP cannot be established through restrictive NAT, so it sounds like a fallback fix for TCP sessions.

Why it is wrong: Use TURN relay for public-network scenarios that cannot establish direct UDP, not as the first fix when a private VPN route and managed-network UDP port are available.

Question 3 of 8Plan and implement identity and security

After a pooled Azure Virtual Desktop host image update, users can start an unsigned routing plug-in from their profile downloads folder, but its attempt to overwrite files in D:\RouteExports is blocked. Security wants non-IT-delivered binaries blocked from running while D:\RouteExports remains protected from unauthorized changes. Which configuration should you choose?

  1. Enforce App Control for Business to trust IT-delivered packages; use Controlled folder access to protect D:\RouteExports and allow only verified writers.
  2. Create Microsoft Defender Antivirus exclusions for the unsigned plug-in; use Controlled folder access to protect D:\RouteExports and allow verified writers.
  3. Use Controlled folder access to allow only IT-delivered executables; use App Control for Business audit events to review D:\RouteExports changes.
  4. Use App Control for Business in Audit mode for non-IT executables; use Controlled folder access to protect D:\RouteExports and allow verified writers.
Show answer and explanation

Answer: A

App Control for Business is the supported control for deciding which binaries are trusted to run. Controlled folder access is the supported control for preventing unauthorized modification of protected folders.

“Security wants non-IT-delivered binaries blocked from running while D:\RouteExports remains protected from unauthorized changes”

What to notice

This quote contains the two hard requirements: block untrusted application execution and preserve protected-folder write protection.

How to decide

Separate the verbs before comparing answers: running needs an execution trust control, while unauthorized changes to a folder need protected-folder write control.

If you picked B

Why it is tempting: The choice still protects D:\RouteExports with Controlled folder access, so the folder half matches the scenario and can distract from the missing execution control.

Why it is wrong: Microsoft Defender Antivirus exclusions change scanning behavior; they are not the control for allowing only approved binaries to execute.

If you picked C

Why it is tempting: Both named technologies are security controls, and audit events can sound like monitoring unauthorized changes.

Why it is wrong: Controlled folder access protects folder contents from unauthorized modification; App Control for Business controls whether untrusted applications can run, and audit events do not enforce folder write protection.

If you picked D

Why it is tempting: The choice pairs App Control for Business with Controlled folder access, which matches the two-control shape of the requirement.

Why it is wrong: To block non-IT-delivered binaries from running, App Control for Business must be enforced rather than only audited.

Show all 8 practice questions
Question 4 of 8Plan and implement identity and security

During a security review of a pooled Azure Virtual Desktop host pool, Microsoft Defender for Cloud flags several session host VMs for disabled antimalware, stale OS updates, and an inbound RDP rule left open for troubleshooting. Users can still connect normally through the Azure Virtual Desktop clients. An engineer says no change is needed because the desktop service is managed by Microsoft. What should you recommend?

  1. Remove the inbound RDP rule only; the managed Azure Virtual Desktop reverse connection path provides the required antimalware and Windows update handling for session hosts.
  2. Open an Azure support request to correct the Azure Virtual Desktop gateway and broker configuration, then wait for Microsoft Defender for Cloud to clear the session host recommendations.
  3. Assign Conditional Access policies to Azure Virtual Desktop users and leave VM hardening unchanged, because successful client connections show that session host controls are outside the incident.
  4. On the session host VMs, enable Microsoft Defender Antivirus and Microsoft Defender for Endpoint, restore Windows Update management, and restrict direct RDP with Network Security Groups.
Show answer and explanation

Answer: D

This matches the documented responsibility boundary. Azure Virtual Desktop service components are Microsoft-managed, but session host operating system protection, endpoint response, patching, and network rules remain administrative responsibilities for the deployed VMs.

“session host VMs”

What to notice

This phrase anchors the findings to deployed virtual machines, not to the Microsoft-managed Azure Virtual Desktop control plane.

How to decide

First identify which resource has the finding, then choose the option that remediates controls on that resource.

If you picked A

Why it is tempting: The Azure Virtual Desktop connection flow is managed and normally avoids direct inbound connectivity, so it can look like it also covers host protection.

Why it is wrong: Use the managed reverse connection path for AVD connectivity, but manage security agents, update state, and inbound rules on the session host VMs.

If you picked B

Why it is tempting: Defender for Cloud surfaces the security issues, and the AVD gateway and broker are Microsoft-managed service components.

Why it is wrong: Use Defender for Cloud to identify posture gaps, then remediate endpoint protection, patching, and VM network controls on the affected session hosts.

If you picked C

Why it is tempting: Conditional Access is an important AVD security control, and normal client connectivity can make the incident look separate from the desktop service.

Why it is wrong: Use Conditional Access for user access decisions, but remediate antimalware, operating system updates, and VM network exposure on the session hosts themselves.

Question 5 of 8Plan and implement user environments and apps

A pooled Azure Virtual Desktop host pool in East US uses FSLogix profile containers on an East US Azure Files share. To improve sign-in times, an administrator added a West Europe Azure Files share to FSLogix Cloud Cache. Since the change, local users sign in more slowly and FSLogix logs show hydration from East US, with the West Europe provider frequently behind in flush sequence. No storage outage has occurred. What should you recommend?

  1. Keep both providers in CCDLocations with East US listed first; hydration will prefer the nearby share while remote flushes complete asynchronously.
  2. Add a third Azure Files provider in another region to distribute Cloud Cache writes and reduce backlog on the West Europe share.
  3. Move the West Europe provider first in CCDLocations so the remote copy stays current, and rely on the local cache to mask latency.
  4. Remove the West Europe provider from CCDLocations; tune the East US Azure Files profile share, and add another provider only for a tested availability requirement.
Show answer and explanation

Answer: D

FSLogix Cloud Cache is intended to improve provider availability, not reduce sign-in latency. It writes changes to every configured provider, so a distant lagging provider can add overhead.

“To improve sign-in times”

What to notice

A sign-in performance goal must be checked against whether the chosen mechanism is designed for availability and whether extra providers add write-path cost.

How to decide

Separate the intended performance goal from the mechanism being used, then verify whether each option reduces latency or adds cross-region write pressure.

If you picked A

Why it is tempting: This choice sounds reasonable because nearby hydration can reduce read latency during profile load.

Why it is wrong: Provider order affects hydration preference; it does not remove write and flush overhead to a lagging remote Cloud Cache provider.

If you picked B

Why it is tempting: Adding a third region can sound like adding capacity or spreading load.

Why it is wrong: Cloud Cache writes profile changes to every configured provider; adding another remote provider adds another destination instead of load-balancing the existing write backlog.

If you picked C

Why it is tempting: Local cache can make Cloud Cache seem able to absorb slow provider access.

Why it is wrong: A local cache can help tolerate provider interruptions, but it does not make a distant Azure Files provider the best hydration path for nearby hosts.

Question 6 of 8Plan and implement user environments and apps

A support queue shows a new Azure Virtual Desktop incident for a pilot user using Windows App. The user signs in successfully, but the app displays no desktops or remote apps. Other users can launch the same desktop, session hosts show Available, and no connection attempt for the pilot user appears in connection diagnostics. Which action should you choose first?

  1. Review the host pool RDP properties, remove custom redirection settings, and refresh the Windows App subscription for the pilot user.
  2. Verify the pilot user has a Desktop Virtualization User assignment to the application group and that the application group is associated with the workspace.
  3. Regenerate the host pool registration key, reinstall the Azure Virtual Desktop Agent, and re-register the available session hosts in the host pool.
  4. Check FSLogix Profile Container access to the profile share, correct NTFS permissions, and clear any stale local profile for the pilot user.
Show answer and explanation

Answer: B

The user authenticates but receives no published resources, and diagnostics show no connection attempt. That places the failure at resource availability in the client, which depends on application group assignment and workspace association.

“The user signs in successfully, but the app displays no desktops or remote apps.”

What to notice

This places the problem after authentication but before resource selection, so the decision should focus on whether the user's published resources are available in the client feed.

How to decide

Identify the last successful stage and the next missing stage. Then compare options that affect resource presentation against options that only affect launch-time behavior.

If you picked A

Why it is tempting: RDP properties can affect the user experience after launch, and refreshing the Windows App subscription sounds relevant to missing resources.

Why it is wrong: RDP properties matter after a published resource is selected. If no desktop or app is displayed and no connection attempt exists, first validate publication and assignment.

If you picked C

Why it is tempting: Registration keys and agents are central to session-host availability, so they can look like reasonable fixes for desktop access problems.

Why it is wrong: Troubleshoot host registration when session hosts are unavailable or cannot accept brokered sessions. A blank client feed before launch points elsewhere.

If you picked D

Why it is tempting: FSLogix profile permissions commonly cause sign-in and user environment problems after a desktop launch begins.

Why it is wrong: FSLogix troubleshooting applies during or after session sign-in on a host. A missing desktop or app in the client is a pre-launch resource presentation issue.

Question 7 of 8Monitor and maintain an Azure Virtual Desktop infrastructure

During a patch window, sessionHost-07 has AllowNewSession set to False. New users are landing on other hosts, but two users still show as Active on sessionHost-07, and the host cannot be restarted until no interactive users remain. Which operational action should you choose?

  1. Keep AllowNewSession set to False and wait for Azure Virtual Desktop to remove the active sessions before restarting sessionHost-07.
  2. Set AllowNewSession to True, use Disconnect for the active sessions, then restart sessionHost-07 after the session list refreshes.
  3. Keep AllowNewSession set to False, notify the active users, then use Log off for the remaining user sessions on sessionHost-07.
  4. Keep AllowNewSession set to False, notify the active users, then use Disconnect for the remaining user sessions on sessionHost-07.
Show answer and explanation

Answer: C

AllowNewSession set to False prevents new Azure Virtual Desktop sessions from being placed on the host. Existing sessions remain until users sign out or an administrator ends them, so Log off is required when the host must have no interactive users.

“the host cannot be restarted until no interactive users remain”

What to notice

This is the controlling maintenance condition. The selected action must end any remaining interactive sessions, not merely prevent new placements or preserve sessions.

How to decide

Separate the placement control from the existing-session state, then choose the action that satisfies the no-interactive-users requirement.

If you picked A

Why it is tempting: New users landing on other hosts makes it look as though the host is already drained for maintenance.

Why it is wrong: Drain mode prevents new Azure Virtual Desktop sessions from being placed on the host, but existing active sessions remain until users sign out or an administrator ends them.

If you picked B

Why it is tempting: Disconnect can look like a quick way to remove users from the host, and a refreshed session list can seem like confirmation that the host is clear.

Why it is wrong: Keep the host isolated from new placements during maintenance, and use Log off when the requirement is to end remaining interactive sessions.

If you picked D

Why it is tempting: Keeping AllowNewSession set to False is correct, and notifying users matches good operations practice, so the final action can be easy to overlook.

Why it is wrong: Use Disconnect when preserving a user session for later reconnection is acceptable; use Log off when the session must end before host maintenance.

Question 8 of 8Monitor and maintain an Azure Virtual Desktop infrastructure

After a regional outage drill, entitlement changes finished quickly, but no session hosts were registered in the secondary host pool. Autoscale then failed with vCPU quota and AllocationFailed messages, so users waited 45 minutes. Profiles, the image version, app packages, and identity were already available in both regions. The recovery target allows users only to reconnect to already available desktops. What should you change?

  1. Use two regional pooled host pools that both run production session hosts; preassign users to both feeds and validate VM quota and capacity for the outage load.
  2. Use one pooled host pool with hosts in both regions; place secondary hosts in drain mode until failover, then remove drain mode and reassign users.
  3. Keep active-passive; maintain stopped secondary hosts with On-Demand Capacity Reservations, then have the runbook start them and move application group assignments.
  4. Keep the secondary host pool deallocated; add Start VM on Connect and rely on autoscale to create hosts from Azure Compute Gallery during failover.
Show answer and explanation

Answer: A

This matches the recovery target because users can reconnect to an already serving regional deployment. Azure Virtual Desktop disaster recovery guidance treats running secondary regional capacity as the approach for the lowest recovery time.

“The recovery target allows users only to reconnect to already available desktops”

What to notice

This makes failover-time startup, host creation, drain-mode removal, or reassignment insufficient unless the desktop capacity is already available when users reconnect.

How to decide

Use this as the controlling recovery-time constraint, then compare options by whether usable session-host capacity exists before the outage response begins.

If you picked B

Why it is tempting: Hosts appear to exist in both regions, and removing drain mode sounds faster than deploying new hosts from scratch.

Why it is wrong: For regional Azure Virtual Desktop BCDR, the already-available-desktop target is met by regional capacity that is already serving users, not by capacity held out of service until failover.

If you picked C

Why it is tempting: On-Demand Capacity Reservations address the physical capacity problem that caused the drill to fail, so this looks like a precise fix for AllocationFailed errors.

Why it is wrong: Capacity reservations can reduce allocation risk, but stopped session hosts and application group moves are active-passive activation steps; immediate reconnect needs already running and registered desktops.

If you picked D

Why it is tempting: Start VM on Connect and autoscale are normal cost-saving tools, and Azure Compute Gallery can standardize new session hosts.

Why it is wrong: Autoscale, Start VM on Connect, and image-based deployment do not guarantee immediately available desktops; they require time and available regional compute capacity during failover.

CramHQ links wrong answers to the mistake behind them. Start with the free assessment, and CramHQ keeps finding your gaps as you practice and adds a repair for each to your Pass Plan.

Start the free AZ-140 assessment

Why study with CramHQ

Find your Azure Virtual Desktop access gaps.

Start with the free AZ-140 assessment. CramHQ uses your result to rank the next step, explain the decisions that matter, and check you again.

Learner actions will appear after the current account is confirmed.

  1. A clear next step, chosen for you

    The Pass Plan ranks gaps by the points they cost and opens the top repair.

  2. Understand why an answer works

    The reasoning behind the right answer and where the alternatives break.

  3. Prove it on a retest

    A fresh question on the same decision verifies the gap is closed.

  4. Track it on your readiness map

    Strengthened areas change colour; pick the next priority from what is left.

  • Flashcards saved from your repairs
  • Optional hints when you are stuck
  • Timed simulations at exam pace
Exam syllabus

Exam-weighted coverage.

Coverage follows the published AZ-140 skill areas measured as of Jul 20, 2026, so your practice stays aligned.

Plan and implement an Azure Virtual Desktop infrastructure

43%

23 concepts

Plan and implement identity and security

18%

13 concepts

Plan and implement user environments and apps

24%

23 concepts

Monitor and maintain an Azure Virtual Desktop infrastructure

15%

8 concepts

Official Microsoft exam changes

Microsoft exam update history

Changes recorded from official Microsoft exam sources.

Effective Jul 20, 2026Minor updateMicrosoft made minor updates across Azure Virtual Desktop identity, security, profiles, client settings, and apps.Integrated by CramHQ

Compared with Skills measured prior to July 20, 2026

Changed

  • Identity integration and security skills were updated.
  • FSLogix and user experience skills were updated.
  • Application installation and configuration skills were updated.
  • The audience profile was updated.
Updated

CramHQ completed the AZ-140 update for the changed Microsoft identity, security, FSLogix, user-experience, client-setting, and application scope.

View official source
Effective Apr 17, 2026Minor updateMicrosoft updated networking, session hosts, images, identity, security, and disaster recovery skills.Integrated by CramHQ

Compared with Skills measured prior to 2026-04-17

Changed

  • Microsoft updated networking, session hosts, images, identity, security, and disaster recovery skills.
Updated

CramHQ integrated the AZ-140 update into this course.

View official source
Effective Jul 21, 2025Minor updateMicrosoft updated session host, client, and application skills.Integrated by CramHQ

Compared with Skills measured prior to 2025-07-21

Changed

  • Microsoft updated session host, client, and application skills.
Updated

CramHQ integrated the AZ-140 update into this course.

View official source
Effective Apr 18, 2025Minor updateMicrosoft updated image management, session host updates, backup, and recovery skills.Integrated by CramHQ

Compared with Skills measured prior to 2025-04-18

Changed

  • Microsoft updated image management, session host updates, backup, and recovery skills.
Updated

CramHQ integrated the AZ-140 update into this course.

View official source
Effective Apr 22, 2024Minor updateMicrosoft updated user experience, client, application, and monitoring skills.Integrated by CramHQ

Compared with Skills measured prior to 2024-04-22

Changed

  • Microsoft updated user experience, client, application, and monitoring skills.
Updated

CramHQ integrated the AZ-140 update into this course.

View official source
Practice and validate

Build breadth before the timed simulation.

Use separate exam-style practice quizzes to validate breadth, review explanations and your answers, use hints when stuck, and build confidence before the timed simulation, with an optional timer.

5 Practice Quizzes

01Practice quiz

AZ-140 Practice Quiz 1

Questions
50
Timer
Optional
02Practice quiz

AZ-140 Practice Quiz 2

Questions
50
Timer
Optional
03Practice quiz

AZ-140 Practice Quiz 3

Questions
50
Timer
Optional
04Practice quiz

AZ-140 Practice Quiz 4

Questions
50
Timer
Optional
05Practice quiz

AZ-140 Practice Quiz 5

Questions
50
Timer
Optional
Timed readiness check

Check readiness under timed conditions.

Use this after practice when you want an exam-style pacing, stamina, and breadth check.

FinalReadiness simulation
CramHQ target700 / 1000

AZ-140 Final Readiness Simulation

Questions
50
Time
100 min
Mode
Timed

Start with the free assessment; full Pass Plan access unlocks the timed exam simulation.

Question formats

Practice the formats this exam path supports.

CramHQ shows the interaction patterns available for AZ-140 from the active exam path inventory.

Single answer

Choose the best answer from exam-style options.

Multi-answer

Select every correct option when more than one applies.

Matching

Match services, tools, or concepts to the right category.

Sequencing

Sequence steps or decisions when the exam path calls for ordering.

Hotspot

Select the correct option in supported visual or row-based prompts.

Exam integrity

Original practice, aligned to public objectives.

CramHQ helps you practice the decisions behind AZ-140 without using copied or confidential exam content.

Practice contentOriginal questions

Original practice questions aligned to public exam objectives.

Coverage sourcePublic objectives

Coverage is checked against the published exam objectives.

Provider relationshipIndependent prep
Microsoft AZ-140 study guide

CramHQ is independent and is not affiliated with Microsoft.

Quick answers

AZ-140 practice test questions, answered.

Do I need to sign up?

No. You can start the assessment and review your report before creating an account. Sign up when you want to save the report and continue the Pass Plan.

Is the report free?

Yes. The assessment, readiness report, and your first targeted repair are free.

Are these copied exam questions or dumps?

No. CramHQ uses original practice items designed to test the decisions and concepts behind the exam.

Is CramHQ affiliated with Microsoft?

No. CramHQ is independent and is not endorsed by Microsoft.

What do I get after the assessment?

Save your report to keep the Pass Plan, fix your first gap free, and unlock the full Pass Plan when you want every repair, practice quizzes, and timed simulation.

I have already studied a lot. Is this still worth it?

That is exactly who it is built for. CramHQ keeps tracking the last few gaps between you and a comfortable pass, the ones a raw score hides, and puts the one costing you the most points at the top of your Pass Plan.

How long do I get access?

12 months of full access from purchase, with room to come back after a break.

What is your refund policy?

Paid exam paths come with a 7-day money-back guarantee. Conditions apply; see the Refund Policy. You can also try the assessment and your first repair free before you buy. Refund Policy

More exam paths

Choose the next certification path that fits your current goal.