Exam AZ-140 topic 1 question 7 discussion

Correct answer is Rule 3

in order to use RDP shortpath on managed networks we have to enable it on avd session hosts and this is not mentioned in the question so i can't just assume its enabled. On the other hand RDP Short path on public connection is enabled by default so answer is B.

each branch office router is configured as VPN endpoint S2S to Azure QoS checklist: Make sure that RDP Shortpath for managed networks is enabled RDP Shortpath for managed networks - ExpressRoute or S2S https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-quality-of-service-qos#qos-implementation-checklist:~:text=Make%20sure%20that%20RDP%20Shortpath%20for%20managed%20networks%20is%20enabled https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-shortpath?tabs=managed-networks#:~:text=site%2Dto%2Dsite%20virtual%20private%20network%20(VPN)

I think most of the posts are missing the point (and please do correct me if I'm wrong); the point of the Site-Azure VPN is not to carry the AVD connection traffic - normally you would connect to the external interface of AVD over the internet - if you were working remotely you wouldn't be going over the VPN. That aside why would you route user sessions over a bandwidth-limited VPN pipe when you can use the effectively unlimited (in terms of user session purposes) internet connection? Modifying the HTTP/HTTPS traffic to Azure would make sense in that case. I'm not saying you couldn;t use the VPN - you absolutely could, but I'm not convinced its best to congest that when there is no practical reason to (e.g. it's for processing highly sensitive data) in this scenario.

Here is my take: If not detailed in the question, assume it has not been changed from the default values. RDP SP works over both Managed (VPN) and Public (Internet, via STUN or TURN) links. Public RDP SP works by default unless you block the traffic, but on a Managed link it requires you you must enable a UDP listener on your session hosts. This is NOT detailed as having being done. https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-shortpath As such, in this scenario, RDP SP is connecting via the Public internet, so Rule 3 needs to be increased, hence Answer B.

A. Rule2

RDP Shortpath is not mentioned, nor is ExpressRoute.

"Each office connects directly to the internet." This sentece says it all. If it goes through the internet, the Rule 3 is the correct answer.

They don't give you enough info stating if RDP shortpath is used or not.

It is Rule 3. Unless using Express Route and Microsoft Peering, the connection between the client and the AVD desktop is via the Internet. Therefore, Rule 3 for Azure-bound Internet is correct.

It is A. QoS doesn't affect internet traffic. Increasing the bandwidth on the S2S connection to Azure would be the answer

AVD va por HTTPS

should be Rule 3, why you want to increase all s2s vpn qos? even for other trafic?

Less overheads through the public Internet.

QoS implementation checklist At a high level, do the following to implement QoS: Make sure your network is ready Make sure that RDP Shortpath for managed networks is enabled - QoS policies are not supported for reverse connect transport For RDP Shortpath for managed networks you need direct line of site between client and session host over a VPN Based on this I would go for A I did previously think B prior to looking into QOS and RDP Shortpath more thoroughly

B Rule 3. ChatGPT approves

RDP Shortpath can be used in two ways: Managed networks, where direct connectivity is established between the client and the session host when using a private connection, such as a virtual private network (VPN). Public networks, where direct connectivity is established between the client and the session host through a NAT gateway, provided as part of the Azure Desktop service, when using a public connection. al parecer ambas son correctas https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-shortpath