What should be included in a recommendation to increase security for session hosts in Azure Virtual Desktop?

To enhance security for session hosts in Azure Virtual Desktop, incorporating Windows Defender Application Control (WDAC) and Memory integrity is essential. WDAC provides a powerful mechanism to ensure that only trusted applications can run on the operating system, effectively preventing unauthorized or malicious software from executing. This helps maintain a secure and compliant environment within the virtual desktop infrastructure.

Memory integrity, part of the virtualization-based security features, protects critical processes and data by ensuring that memory operations are executed only when they are authorized. This adds an additional layer of defense against sophisticated attacks that attempt to compromise system memory.

By utilizing both WDAC and Memory integrity, organizations can significantly reduce the attack surface and enhance the overall security posture of their Azure Virtual Desktop environment. This recommendation aligns with best practices for securing session hosts, ensuring that they are resilient against a variety of security threats.