AZ-802: Administering Windows Server

By Microsoft · Question Mode

QuestionQ36

Manage storage and file services

You have a file server named Server1 running Windows Server that hosts file shares.

You need to enable internet-based SMB access to the shares without deploying a VPN. The solution must ensure inbound TCP port 445 is blocked from the internet.

What should you configure?

Explanation

SMB over QUIC provides secure SMB access over untrusted networks through a TLS 1.3-encrypted QUIC tunnel, using inbound UDP port 443 by default instead of legacy SMB on TCP port 445. Microsoft specifically advises not allowing inbound TCP 445 to the file server for this deployment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!