Your network consists of a single Active Directory domain.
All domain controllers run Windows Server 2008 R2.
There are five Windows Server 2003 SP2 servers thathave the Terminal Server component installed.
A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006.
You plan to give remote users access to the Remote Desktop Services servers.
You need to create a remote access strategy for theRemote Desktop Services servers that meets the following
requirements:
Restricts access to specific Remote Desktop Services servers.
Encrypts all connections to the Remote Desktop Services servers.
Minimizes the number of open ports on the firewall server.
What should you do?

A.
Implement SSL bridging on the ISA Server. Requireauthentication on all inbound connections to the ISA
Server.

B.
Implement port forwarding on the ISA Server. Require authentication on all inbound connections to the ISA
Server.

C.
Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008
R2 server, implement the Remote Desktop Gateway (RDGateway) role service, and configure a Remote
Desktop resource authorization policy (RD RAP).

D.
Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008
R2 server, implement the Remote Desktop Gateway (RDGateway) role service, and configure a Remote
Desktop connection authorization policy (RD CAP).

Explanation:
REMOTE DESKTOP GATEWAY
Remote Desktop Gateway (RD Gateway) is a role service that enables authorized remote users to connect to
resources on an internal corporate or private network, from any Internet-connected device that can runthe
Remote Desktop Connection (RDC) client. The networkresources can be Remote Desktop Session Host (RD
Session Host) servers, RD Session Host servers running RemoteApp programs, or computers with Remote
Desktop enabled. RD Gateway uses the Remote DesktopProtocol (RDP) over HTTPS to establish a secure,
encrypted connection between remote users on the Internet and the internal network resources on which their
productivity applications run.
Remote Desktop connection authorization policies (RD CAPs) allow you to specify who can connect to an RD
Gateway server. Remote Desktop resource authorization policies (RD RAPs) allow you to specify the internal
network resources (computers) that remote users canconnect to through an RD Gateway server.
http://technet.microsoft.com/en-us/library/cc731150