MD-102 · Question #125
You have a computer named Computer1 that runs Windows 11. A user named User1 plans to use Remote Desktop to connect to Computer1. You need to ensure that the device of User1 is authenticated before…
The correct answer is B. Enable Network Level Authentication (NLA). To ensure client device authentication occurs before the Remote Desktop sign-in page appears, Network Level Authentication (NLA) must be enabled on the host computer.
Question
You have a computer named Computer1 that runs Windows 11. A user named User1 plans to use Remote Desktop to connect to Computer1. You need to ensure that the device of User1 is authenticated before the Remote Desktop connection is established and the sign in page appears. What should you do on Computer1?
Options
- ATurn on Reputation-based protection
- BEnable Network Level Authentication (NLA)
- CTurn on Network Discovery
- DConfigure the Remote Desktop Configuration service
How the community answered
(23 responses)- A13% (3)
- B74% (17)
- C9% (2)
- D4% (1)
Why each option
To ensure client device authentication occurs before the Remote Desktop sign-in page appears, Network Level Authentication (NLA) must be enabled on the host computer.
Reputation-based protection is a Microsoft Defender SmartScreen feature that helps protect against malicious apps, files, and websites, not client authentication for RDP.
Network Level Authentication (NLA) requires the client to authenticate at the network level before a full Remote Desktop session is established. This pre-authentication process enhances security by preventing unauthenticated clients from consuming server resources and potentially exploiting vulnerabilities on the sign-in screen itself.
Network Discovery allows a computer to see other devices on the network and for other devices to see it, but it does not enforce pre-authentication for RDP connections.
The Remote Desktop Configuration service manages RDP settings, but simply configuring it without enabling NLA will not force pre-authentication before the sign-in page.
Concept tested: Remote Desktop Network Level Authentication (NLA)
Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-nla-enable
Topics
Community Discussion
No community discussion yet for this question.