Correct Answer: Reverse Connect (Reverse Proxy) outbound TCP connection to the AVD service gateway
Azure Virtual Desktop uses a 'Reverse Connect' architecture. The session host agent establishes an outbound HTTPS/TLS connection (port 443) to the AVD gateway. When a client connec...
Correct Answer
Reverse Connect (Reverse Proxy) outbound TCP connection to the AVD service gateway
Why This Answer Is Correct
Azure Virtual Desktop uses a 'Reverse Connect' architecture. The session host agent establishes an outbound HTTPS/TLS connection (port 443) to the AVD gateway. When a client connects, the gateway proxies the traffic through this outbound connection, meaning no inbound ports need to be open on the session host firewall.
This question evaluates your knowledge of Azure Virtual Desktop Network Security — a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Network Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.