Your network contains an Active Directory domain named contoso.com.
The domain contains a computer named Computer1 that runs Windows 10.
The network uses the 172.16.0.0/16 address space.
Computer1 has an application named App1.exe that is located in D:\\Apps\\.
App1.exe is configured to accept connections on TCP port 8080.
You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate
network.
Solution: You configure an inbound rule that allows the TCP protocol on port 8080, uses a scope of
172.16.0.0/16 for local IP addresses, and applies to a private
profile.
Does this meet the goal?

A.
Yes

B.
No

Explanation:
“You need to ensure that App1.exe can accept connections only when Computer1 is connected to the
corporate network.”, you should create the firewall rule for
“Domain” profile instead, not the “Private” profile.

https://technet.microsoft.com/en-us/library/getting-started-wfas-firewall-profiles-ipsec(v=ws.10).aspx