Your company uses Azure Virtual Desktop $($AVD$).$

You have a network security group named SG$1$ that is used to manage traffic to and from the AVD virtual machine subnet.

You are configuring an outbound security rule on SG$1$ to allow connectivity to the Internet.

You need to select an appropriate Destination filter for secure access to the service. Your solution must minimize administrative effort and minimize impact on IP address changes.

Which Destination filter will you select?