Securing Windows Server 2016 — Question 137

You have a Hyper-V host named Hyper1 that has a virtual machine named FS1. FS1 is a file server that contains sensitive data.
You need to secure FS1 to meet the following requirements:
✑ Prevent console access to FS1.
✑ Prevent data from being extracted from the VHDX file of FS1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. Disable all the Hyper-V integration services for FS1.
• B. On Hyper1, enable BitLocker Drive Encryption (BitLocker) for the drive that contains the VHDX file for FS1.
• C. Disable the virtualization extensions for FS1.
• D. Enable shielding for FS1.
• E. Enable BitLocker Drive Encryption (BitLocker) for all the volumes on FS1.

Correct answer: D, E

Explanation

The correct answers are D and E because enabling shielding for FS1 provides protection against unauthorized access to the virtual machine and its data. Additionally, enabling BitLocker Drive Encryption for all volumes on FS1 secures the data at rest, preventing extraction from the VHDX file. Options A, B, and C do not adequately address the requirements of securing FS1 against console access and data extraction.