Securing Windows Server 2016 — Question 86

Your network contains an Active Directory domain named contoso.com. The domain contains several shielded virtual machines.
You deploy a new server named Server1 that runs Windows Server 2016.
You install the Hyper-V server role on Server1.
You need to ensure that you can host shielded virtual machines on Server1.
What should you install on Server1?

Answer options

• A. Host Guardian Hyper-V Support
• B. the Windows Biometric Framework (WBF)
• C. VM Shielding Tools for Fabric Management
• D. BitLocker Network Unlock

Correct answer: A

Explanation

The correct answer is A, Host Guardian Hyper-V Support, as it is specifically designed to enable the hosting of shielded virtual machines on Hyper-V. Options B, C, and D are not relevant to shielded VM hosting; WBF is related to biometric devices, VM Shielding Tools are for managing shielded VMs but do not enable hosting, and BitLocker Network Unlock pertains to BitLocker functionality.