Exam 3V0-752 topic 1 question 59 discussion

Actual exam question from VMware's 3V0-752

Question #: 59
Topic #: 1

A company is proposing:
✑ All external network users will access their desktop using BLAST protocol. No other protocol will be used.
✑ Device will NOT be allowed to be attached to PCs while users are outside of the internal network.
✑ VMware Unified Access Gateways will be deployed behind a secure network and strict security requirements implemented.
A consultant was brought in to determine backend firewall port requirements to support the proposal.
What are the minimum required firewall rules between the Unified Access Gateway appliance and back end components?

A. Unified Access Gateway Appliance to View Connection Server or Load balancer on port 443 Unified Access Gateway Appliance to Remote Desktop on port 8443
B. Unified Access Gateway Appliance to View Connection Server or Load balancer on port 443 Unified Access Gateway Appliance to Remote Desktop on port 22443 Unified Access Gateway Appliance to Remote Desktop on port 32111
C. Unified Access Gateway Appliance to View Connection Server or Load balancer on port 80 Unified Access Gateway Appliance to View Connection Server or Load balancer on port 443 Unified Access Gateway Appliance to Remote Desktop on port 8443
D. Unified Access Gateway Appliance to View Connection Server or Load balancer on port 443 Unified Access Gateway Appliance to Remote Desktop on port 22443

Show Suggested Answer

Suggested Answer: B 🗳️

by WeS_01 at March 2, 2020, 3:19 p.m.

Comments

Submit Cancel

NNy

Highly Voted 2 years, 2 months ago

I think D because in the question is says 'Minimum requirements' and USB 32111 is not mentioned as needed so it's an optional FW port.

upvoted 8 times

stjwh1

2 years, 1 month ago

I agree. It need to block 32111 port for device will not be allowed.

upvoted 2 times

...

ShazPaz

Most Recent 8 months, 2 weeks ago

Answer is B. You must block port 32111 on external firewall if you want to block USB redirection. Ref: ports.vmware.com

upvoted 1 times

ShazPaz

8 months, 2 weeks ago

Sorry I misread the question. We do not need to open 32111 so D is the answer

upvoted 1 times

...

catalinuxm

1 year ago

"Device will NOT be allowed to be attached to PCs while users are outside of the internal network" implies that USB devices will be allowed when on internal network. Which means TCP 3211 needs to be opened.

upvoted 1 times

JoeTromundo

11 months, 1 week ago

But on internal network the connection doesn't go through the UAG, it goes directly to the Connection Server. So, the answer is D.

upvoted 1 times

...

LuisEsteban

1 year, 9 months ago

B https://docs.vmware.com/en/Unified-Access-Gateway/3.3.1/com.vmware.uag-331-deploy-config.doc/GUID-F197EB60-3A0C-41DF-8E3E-C99CCBA6A06E.html

upvoted 1 times

...

WeS_01

2 years, 2 months ago

USB or Not ? (port 32111), B or D ? i would choose B cause "VMware Unified Access Gateways will be deployed behind a secure network and strict security requirements implemented" . Tricky question !

upvoted 1 times

...