Public-cloud clients and hosts can establish TCP sessions and reach STUN, but symmetric NAT prevents a viable direct UDP path. UDP relay use is permitted by policy. Which Shortpath method addresses this condition?

Choose the single best answer.

A.Public inbound administrative TCP 3389
B.Unauthenticated UDP sent before AVD brokering
C.TURN-relayed UDP using the documented relay endpoint
D.STUN as a relay for the full desktop stream

Show the answer and explanation

✓ Correct answer

TURN-relayed UDP using the documented relay endpoint

TURN is the supported relay mechanism for this NAT condition. In Azure public cloud, allow the current documented relay range and UDP 3478 as required. Option explanations: A. Public inbound administrative TCP 3389: Opening administrative RDP is not the Shortpath UDP relay solution. B. Unauthenticated UDP sent before AVD brokering: Shortpath does not bypass the initial authentication and reverse-connection process. C. TURN-relayed UDP using the documented relay endpoint: TURN carries UDP through a relay when direct NAT traversal cannot form a viable path. D. STUN as a relay for the full desktop stream: STUN discovers mappings; it does not relay the complete session. Sources: RDP Shortpath for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-shortpath; Required FQDNs and endpoints for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/required-fqdn-endpoint

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.