Hosts can reach the AVD service over HTTPS, but Windows activation fails. Firewall logs show blocked traffic to azkms.core.windows.net. Which documented dependency should be allowed?

Choose the single best answer.

A.TCP 1688 to the specified Azure KMS endpoint
B.UDP 3390 to the KMS endpoint
C.UDP 3478 to the profile share
D.TCP 445 to the workspace feed endpoint

Show the answer and explanation

✓ Correct answer

TCP 1688 to the specified Azure KMS endpoint

AVD HTTPS access does not cover every host dependency. Permit the documented activation endpoint and port using the current endpoint requirements. Option explanations: A. TCP 1688 to the specified Azure KMS endpoint: This is the documented Windows activation dependency in the host endpoint list. B. UDP 3390 to the KMS endpoint: UDP 3390 is the default managed Shortpath listener, not the activation transport. C. UDP 3478 to the profile share: STUN/TURN relay traffic does not activate Windows. D. TCP 445 to the workspace feed endpoint: SMB to a workspace feed is unrelated to Windows activation. Sources: Required FQDNs and endpoints for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/required-fqdn-endpoint

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.