Your organization uses ExpressRoute private peering between the corporate network and Azure. You want to reduce latency and jitter for Azure Virtual Desktop by enabling RDP Shortpath for managed networks between corporate devices and session hosts. Which two changes are required? (Select two answers.)

To enable RDP Shortpath for managed networks, you must first enable the feature on the host pool settings. This tells the AVD service to attempt a direct UDP connection. Secondly, you need to ensure network connectivity. RDP Shortpath for managed networks uses UDP port 3390. Therefore, you must configure Network Security Groups (NSGs) and any firewalls (like Azure Firewall) to allow inbound UDP 3390 traffic from your corporate network ranges to the session host subnet. Opening outbound UDP 3478 to the internet is for RDP Shortpath for public networks, not managed networks. Assigning public IPs to session hosts is unnecessary and insecure, as ExpressRoute provides private connectivity. Disabling Reverse Connect would prevent AVD from working at all, as it's the primary connection method for clients to session hosts.