Securing Windows Server 2016 — Question 152

You have a Host Guardian Service (HGS) and a guarded host.
You have a VHDX file that contains an image of Windows Server 2016.
You need to provision a virtual machine by using a shielded template.
Which three files should you create? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. a TPM baseline policy file
• B. a TPM identifier file
• C. a shielding data .pdk file
• D. a signature for the .vhdx file
• E. an unattended.xml file

Correct answer: C, D, E

Explanation

The correct files to create are a shielding data .pdk file (C), a signature for the .vhdx file (D), and an unattended.xml file (E). These files are essential for configuring the shielded VM, as the .pdk file contains the shielding data, the signature validates the .vhdx file's integrity, and the unattended.xml file automates the installation process. Options A and B are not needed for provisioning a shielded virtual machine.