Question
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
- A VPN connection to the main office
- A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.
| Name | Destination | Available bandwidth allocated |
|---|---|---|
| Rule1 | VPN traffic to the main office | 25% |
| Rule2 | Site-to-site VPN traffic to Azure | 25% |
| Rule3 | HTTP/HTTPS traffic to all Azure and Microsoft 365 public IP addresses | 25% |
| Rule4 | Traffic to non-Microsoft internet addresses | 25% |
Users in the branch office report slow responses and connection errors when they attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
- A. Rule2
- B. Rule3 Correct
- C. Rule4
- D. Rule1
Explanation
Azure Virtual Desktop clients do not connect to session hosts over the site-to-site VPN; they establish a reverse connection to the Azure Virtual Desktop service's public endpoints over TCP port 443, so the traffic matches the HTTPS-to-Azure rule. Increasing Rule3's bandwidth therefore helps the sessions. Rule2 carries only private VPN traffic to the virtual network, which client connections do not use, and Rule1 and Rule4 cover unrelated destinations.
