Question 20
A post-change operational risk review considers: Session users see transport fallback after a firewall change blocks required UDP traffic. Which risk MOST DIRECTLY explains the need for the proposed AVD control?
Explanation
Correct Answer
The condition is: Session users see transport fallback after a firewall change blocks required UDP traffic. The directly related risk is: Blocking UDP can force sessions to use fallback transport and worsen interactive latency for suitable network paths. The corrective control is: Enable and validate an appropriate RDP Shortpath path with supported UDP connectivity and firewall rules while retaining standard transport fallback. Its test of effectiveness is: Connection diagnostics identify an established Shortpath UDP transport for a representative supported session. This issue is specific to the observed AVD behavior, not to a separate administration concern.
Incorrect Answers
This option relates to RDP Multipath and QoS policy selection under AZ-140 objective group 1.1. It addresses a different failure risk: A transport policy applied without checking client support and network treatment may create no measurable benefit. But the observed requirement is: Session users see transport fallback after a firewall change blocks required UDP traffic. For the targeted topic (RDP Shortpath direct UDP transport), the directly relevant risk is: Blocking UDP can force sessions to use fallback transport and worsen interactive latency for suitable network paths. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to Session-host subnet and egress design under AZ-140 objective group 1.1. It addresses a different failure risk: An isolated subnet with blocked required outbound endpoints can stop agents from registering even when the VMs are running. But the observed requirement is: Session users see transport fallback after a firewall change blocks required UDP traffic. For the targeted topic (RDP Shortpath direct UDP transport), the directly relevant risk is: Blocking UDP can force sessions to use fallback transport and worsen interactive latency for suitable network paths. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to Azure Private Link for AVD control-plane access under AZ-140 objective group 1.1. It addresses a different failure risk: Creating a private endpoint without matching DNS and route configuration can make clients resolve an unreachable public or private address. But the observed requirement is: Session users see transport fallback after a firewall change blocks required UDP traffic. For the targeted topic (RDP Shortpath direct UDP transport), the directly relevant risk is: Blocking UDP can force sessions to use fallback transport and worsen interactive latency for suitable network paths. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.