You have an Azure Virtual Desktop deployment. You have a RemoteApp named App1. You discover that from the Save As dialog box of App1, users can run executable a...

You have an Azure Virtual Desktop deployment.
You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?

A. Configure a conditional access policy in Azure Active Directory (Azure AD). B. Modify the Access control (IAM) settings of the host pool. C. Modify the RDP Properties of the host pool. D. Configure an AppLocker policy on the session hosts.