Your company uses Remote Desktop Services (RDS). You install and configure the Remote
Desktop Gateway (RD Gateway) role service on a server that runs Windows Server 2008
R2. Employees connect to RDS from unmanaged remote computers Employees are unable
to access the RD Gateway server from the unmanaged remote computers. You need to
ensure that employees can access the RD Gateway server. What should you do?

A.
On the RD Gateway server, open port 3389 on the Windows Firewall.

B.
Create a Remote Desktop connection authorization policy (RD CAP).

C.
Create a Remote Desktop resource authorization policy (RD RAP).

D.
On the RD Gateway server, configure Network Access Protection (NAP) health policy
checking.

Explanation:
Remote Desktop Gateway (RD Gateway) is a role service that enables authorized remote
users to connect to resources on an internal corporate or private network, from any Internet-

connected device that can run the Remote Desktop Connection (RDC) client. The network
resources can be Remote Desktop Session Host (RD Session Host) servers, RD Session
Host servers running RemoteApp programs, or computers with Remote Desktop enabled.
RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure,
encrypted connection between remote users on the Internet and the internal network
resources on which their productivity applications run. Users on Remote Desktop Services
clients must meet specific requirements before they can connect to RDGateway. These
requirements include the following:
Supported Windows authentication method (required).You can configure the authentication
methods that the RDGateway server will allow by using Remote Desktop Gateway Manager.
On clients, you can configure the authentication method to be used to connect to the
RDGateway server by using Group Policy.
User group membership (required).You configure the user group membership requirement
by using Remote Desktop Gateway Manager.
Client computer group membership (optional).You configure the client computer group
membership requirement by using Remote Desktop Gateway Manager.
For remote clients to successfully connect to internal network resources (computers) through
a Remote Desktop Gateway (RD Gateway) server, clients must meet the conditions
specified in at least one Remote Desktop connection authorization policy (RD CAP) and
Remote Desktop resource authorization policy (RD RAP). RD CAPs specify who can
connect to an RD Gateway server and the authentication method that must be used. RD
RAPs specify the computers that clients can connect to through an RD Gateway server.
Note: A limit can be set on the RD Gateway server to restrict the maximum number of
simultaneous client connections.