Practice question 28 of 180 · hard
A host-side proxy/security baseline attempts to intercept every destination. The team must preserve required Azure platform communication. Which two platform IP destinations need the documented exception from interception or redirection?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- 168.63.129.16
- 169.254.169.254
IMDS and Azure platform communication must retain their required paths. A host-side interception policy must exempt these destinations; ordinary Azure NSGs and UDRs do not redirect the protected platform paths by default. Option explanations: A. 168.63.129.16: This platform communication/DNS address must retain its required path without interception or redirection. B. 51.5.0.0/16: This is the public-cloud Shortpath relay range, not one of the two special Azure platform addresses identified here. C. 169.254.169.254: This is IMDS and must retain its required platform path without proxying or redirection. D. azkms.core.windows.net: This is a documented activation destination, but not one of the two special platform IP paths identified here. Sources: Required FQDNs and endpoints for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/required-fqdn-endpoint
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.