What port does RDP (Remote Desktop Protocol) use, and what two security risks exist when exposing RDP directly to the internet?

• A.RDP uses TCP 443 in modern Windows; exposing port 443 for RDP is safe because TLS encryption prevents all attacks
• B.RDP uses UDP 3389. Security risks are limited to eavesdropping since RDP traffic is unencrypted
• C.RDP uses TCP 3389. Security risks: (1) Brute-force and credential stuffing attacks: RDP on the internet is continuously targeted by automated scanners; without account lockout and strong passwords, attackers can try millions of credentials. (2) RDP vulnerabilities: historically critical CVEs (BlueKeep CVE-2019-0708, DejaBlue CVE-2019-1182) allow unauthenticated remote code execution on exposed RDP services. Mitigation: never expose 3389 directly; use VPN or RD Gateway, enable Network Level Authentication (NLA), and use strong credentials