You have a pooled host pool (Pool1) with five session hosts. Two apps, App1 and App2, must be installed on all session hosts. All users connect to a full desktop session. Only sales users may use App1; only research users may use App2. To ensure each department’s users see only their assigned app when connecting to Pool1, which solution should you use?

FSLogix application masking is the correct solution because it allows you to hide specific applications from users or groups based on their identity, even if the applications are installed on the session host. This ensures that sales users only see App1 and research users only see App2, while both apps are present on all session hosts. MSIX app attach delivers applications dynamically to virtual machines but doesn't provide the granular control needed to hide applications from specific user groups once they are attached. RemoteApp application groups and RemoteApp streaming are used to publish individual applications to users, but the scenario specifies users connect to a full desktop session, not just individual apps. While you could publish apps this way, it doesn't solve the problem of hiding apps from users within their full desktop session.