You have an Azure Virtual Desktop deployment that contains a session host named Host1. You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1. Whic

The correct answer is B. Svchost.exe. RDP Shortpath for Azure Virtual Desktop uses UDP-based transport. The underlying service that handles Remote Desktop Protocol connections - including RDP Shortpath - is the Remote Desktop Services (TermService), which runs as a hosted service inside svchost.exe. When creating the

Submitted by brentm· Apr 18, 2026Plan and implement an Azure Virtual Desktop infrastructure

Question

You have an Azure Virtual Desktop deployment that contains a session host named Host1. You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1. Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?

Options

ARdpshell.exe
BSvchost.exe
CRaserver.exe
DMstsc.exe

How the community answered

(25 responses)

A
4% (1)
B
72% (18)
C
16% (4)
D
8% (2)

Explanation

RDP Shortpath for Azure Virtual Desktop uses UDP-based transport. The underlying service that handles Remote Desktop Protocol connections - including RDP Shortpath - is the Remote Desktop Services (TermService), which runs as a hosted service inside svchost.exe. When creating the Windows Defender Firewall inbound rule to permit RDP Shortpath UDP traffic, you specify svchost.exe as the program because that is the process hosting TermService. Rdpshell.exe is the shell host for RD sessions but does not listen for incoming connections. Raserver.exe is the Remote Assistance server. Mstsc.exe is the RDP client used to initiate outbound connections, not to receive them.

Topics

#AVD Networking#RDP Shortpath#Windows Firewall#Session Host Security

Community Discussion

No community discussion yet for this question.

Full AZ-140 Practice