Securing Windows Server 2016 — Question 72

You are creating a Nano Server image for the deployment of 10 servers.
You need to configure the servers as guarded hosts that use Trusted Platform Module (TPM) attestation.
Which three packages should you include in the Nano Server image? Each correct answer presents part of the solution.

Answer options

• A. Microsoft-NanoServer-SCVMM-Compute-Package
• B. Microsoft-NanoServer-SecureStartup-Package
• C. Microsoft-NanoServer-Compute-Package
• D. Microsoft-NanoServer-ShieldedVM-Package
• E. Microsoft-NanoServer-Storage-Package
• F. Microsoft-NanoServer-SCVMM- Package

Correct answer: B, C, D

Explanation

The correct packages for configuring guarded hosts with TPM attestation are Microsoft-NanoServer-SecureStartup-Package, Microsoft-NanoServer-Compute-Package, and Microsoft-NanoServer-ShieldedVM-Package. The SecureStartup package is essential for enabling secure boot, while the ShieldedVM package is necessary for creating shielded virtual machines. The other options do not provide the required functionalities for TPM attestation.