You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers. You have a hybrid Azure Active Direc...

You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure AD.
You have a Windows Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.
You need to ensure that only the members of WVDusers can establish Windows Virtual Desktop sessions to the host pool.
What should you do?

A. Assign WVDusers to an Azure role scoped to each host pool. B. On each session host, add WVDusers to the local Remote Desktop Users group. C. Assign WVDusers to an Azure role scoped to the session hosts. D. Assign WVDusers to an application group.