Securing Windows Server 2016 — Question 115

You have a guarded fabric and a Host Guardian Service server named HGS1.
You deploy a Hyper-V host named Hyper1, and configure Hyper1 as part of the guarded fabric.
You plan to deploy the first shielded virtual machine.
You need to ensure that you can run the virtual machine on Hyper1.
What should you do?

Answer options

• A. On HGS1, run the Export-HgsKeyProtectionState cmdlet, and then run the Import-HgsGuardian cmdlet.
• B. On Hyper1, run the Invoke-WebRequest cmdlet, and then run the Import-HgsGuardian cmdlet.
• C. On the virtual machine, retrieve the metadata of the guarded fabric, and then import the metadata.
• D. On Hyper1, run the Export-HgsKeyProtectionState cmdlet, and then run the Import-HgsGuardian cmdlet.

Correct answer: B

Explanation

The correct answer is B because running the Invoke-WebRequest cmdlet on Hyper1 allows it to communicate with the Host Guardian Service and retrieve necessary information for the shielded VM. Options A and D involve commands that are not relevant to setting up the virtual machine on Hyper1, and option C is incorrect as retrieving metadata does not directly facilitate the deployment of the VM.