To enable screen capture protection on all session hosts in Pool1 while minimizing administrative effort, what should you do?

The correct answer is to configure a local Group Policy setting on each session host. Azure Virtual Desktop (AVD) screen capture protection is enabled per session host using a local Group Policy Object (GPO) or a centralized GPO managed by Active Directory. This method directly applies the necessary security setting to prevent screen captures. Configuring RDP Properties for Pool1 (Session behavior or Display settings) does not offer the granular control needed for screen capture protection. These settings primarily manage connection and display characteristics, not security features like screen capture prevention. Adding an extension to each session host is not the standard or recommended method for implementing screen capture protection in AVD; it's typically handled through policy settings.