nerdexam
Microsoft

MD-102 · Question #125

You have a computer named Computer1 that runs Windows 11. A user named User1 plans to use Remote Desktop to connect to Computer1. You need to ensure that the device of User1 is authenticated before…

The correct answer is B. Enable Network Level Authentication (NLA). To ensure client device authentication occurs before the Remote Desktop sign-in page appears, Network Level Authentication (NLA) must be enabled on the host computer.

Submitted by kim_seoul· Apr 18, 2026Protect devices

Question

You have a computer named Computer1 that runs Windows 11. A user named User1 plans to use Remote Desktop to connect to Computer1. You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears. What should you do on Computer1?

Options

  • ATurn on Reputation-based protection
  • BEnable Network Level Authentication (NLA)
  • CTurn on Network Discovery
  • DConfigure the Remote Desktop Configuration service

How the community answered

(23 responses)
  • A
    13% (3)
  • B
    74% (17)
  • C
    9% (2)
  • D
    4% (1)

Why each option

To ensure client device authentication occurs before the Remote Desktop sign-in page appears, Network Level Authentication (NLA) must be enabled on the host computer.

ATurn on Reputation-based protection

Reputation-based protection is a Microsoft Defender SmartScreen feature that helps protect against malicious apps, files, and websites, not client authentication for RDP.

BEnable Network Level Authentication (NLA)Correct

Network Level Authentication (NLA) requires the client to authenticate at the network level before a full Remote Desktop session is established. This pre-authentication process enhances security by preventing unauthenticated clients from consuming server resources and potentially exploiting vulnerabilities on the sign-in screen itself.

CTurn on Network Discovery

Network Discovery allows a computer to see other devices on the network and for other devices to see it, but it does not enforce pre-authentication for RDP connections.

DConfigure the Remote Desktop Configuration service

The Remote Desktop Configuration service manages RDP settings, but simply configuring it without enabling NLA will not force pre-authentication before the sign-in page.

Concept tested: Remote Desktop Network Level Authentication (NLA)

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-nla-enable

Topics

#Remote Desktop Protocol#Network Level Authentication#Device Authentication#Windows 11

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice