Exam AZ-140 topic 4 question 35 discussion

It´B "svchost.exe" New-NetFirewallRule -DisplayName 'Remote Desktop - RDP Shortpath (UDP-In)' -Action Allow -Description 'Inbound rule for the Remote Desktop service to allow RDP Shortpath traffic. [UDP 3390]' -Group '@FirewallAPI.dll,-28752' -Name 'RemoteDesktop-UserMode-In-RDPShortpath-UDP' -PolicyStore PersistentStore -Profile Domain, Private -Service TermService -Protocol UDP -LocalPort 3390 -Program '%SystemRoot%\system32\svchost.exe' -Enabled:True https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-rdp-shortpath?tabs=managed-networks

To configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on your Azure Virtual Desktop session host, you should specify Svchost.exe in the inbound firewall rule. This is because RDP Shortpath uses the svchost.exe process to handle the UDP traffic required for the connection. The correct answer is B. Svchost.exe.

C. Specifying Svchost.exe may seem like a simpler and more inclusive solution, as it hosts many Windows services, including those related to Remote Desktop. However, this practice can also increase the attack surface, as it allows a larger number of services to communicate through the firewall. Raserver.exe is specifically related to RDP Shortpath, so configuring a firewall rule for this process reduces the risk of exposing other unnecessary services.

answer is B

ew-NetFirewallRule -DisplayName 'Remote Desktop - RDP Shortpath (UDP-In)' -Action Allow -Description 'Inbound rule for the Remote Desktop service to allow RDP Shortpath traffic. [UDP 3390]' -Group '@FirewallAPI.dll,-28752' -Name 'RemoteDesktop-UserMode-In-RDPShortpath-UDP' -Profile Domain, Private -Service TermService -Protocol UDP -LocalPort 3390 -Program '%SystemRoot%\system32\svchost.exe' -Enabled:True -GPOSession $gpoSession

ew-NetFirewallRule -DisplayName 'Remote Desktop - RDP Shortpath (UDP-In)' -Action Allow -Description 'Inbound rule for the Remote Desktop service to allow RDP Shortpath traffic. [UDP 3390]' -Group '@FirewallAPI.dll,-28752' -Name 'RemoteDesktop-UserMode-In-RDPShortpath-UDP' -Profile Domain, Private -Service TermService -Protocol UDP -LocalPort 3390 -Program '%SystemRoot%\system32\svchost.exe' -Enabled:True -GPOSession $gpoSession

Please check https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-rdp-shortpath?tabs=managed-networks The provided answer here is incorrect.

https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-rdp-shortpath?tabs=managed-networks

Answer is B

Answer is B

Answer is: B https://www.parallels.com/blogs/ras/rdp-shortpath/