Securing Windows Server 2016 — Question 2

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. The forest contains a single domain.
The domain contains multiple Hyper-V hosts.
You plan to deploy guarded hosts.
You deploy a new server named Server22 to a workgroup.
You need to configure Server22 as a Host Guardian Service server.
What should you do before you initialize the Host Guardian Service on Server22?

Answer options

• A. Install the Active Directory Domain Services server role on Server22.
• B. Obtain a certificate.
• C. Raise the forest functional level.
• D. Join Server22 to the domain.

Correct answer: D

Explanation

To configure Server22 as a Host Guardian Service server, it must be part of the Active Directory domain, which is achieved by joining it to the domain. The other options are not necessary for this configuration; installing the AD DS role or obtaining a certificate are not prerequisites, and raising the forest functional level is only needed if new features are to be utilized, not for the initialization of the Host Guardian Service.