70-698 · Question #80
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer…
The correct answer is B. Unified Extensible Firmware Interface (UEFI). UEFI firmware is required to enable virtualization-based security features in Windows 10 Enterprise such as Device Guard and Credential Guard.
Question
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario exactly the same in each question in this series. Start of repeated scenario Your network contains a single Active Directory domain named contoso.com. All computers are members of the domain and run the 64-bit version of Windows 10 Enterprise. On a test computer named Computer_Test1, you pin several company-specific applications in a group named Contoso Apps, and then you export the start menu layout to a file named contoso.xml. You install Client Hyper-V on a computer named Computer6. You identity the following requirements:
- Install the Hyper V feature on a computer named Computer1.
- Use virtual smart card authentication on a computer named Computer2.
- Enable Secure Boot on a computer named Computer3.
- Connect a computer named Computer4 to a projector by using Miracast.
- Ensure that a user named User 1 can use keyboard shortcuts by
pressing one key at a time.
- Ensure that you can share the clipboard between Computer6 and the
virtual machines running on Computer6.
- Add the Contoso Apps group to the Start menu of a computer named
Computer7. End of repeated scenario. Which hardware feature must Computer3 support.
Options
- AData Execution Prevention (DEP)
- BUnified Extensible Firmware Interface (UEFI)
- CTrusted Platform Module (TPM)
- DSecond Level Address Translation (SLAT)
How the community answered
(58 responses)- A5% (3)
- B91% (53)
- C2% (1)
- D2% (1)
Why each option
UEFI firmware is required to enable virtualization-based security features in Windows 10 Enterprise such as Device Guard and Credential Guard.
Data Execution Prevention (DEP) is a CPU and OS-level memory protection feature that prevents code execution in data regions and is not a firmware interface requirement for enterprise security features.
UEFI replaces legacy BIOS and provides the secure firmware foundation that Windows 10 Enterprise virtualization-based security features depend on, including enabling Secure Boot and the hardware-isolated security environment used by Device Guard and Credential Guard. These enterprise security capabilities explicitly require UEFI firmware - a system still running legacy BIOS cannot support them regardless of other hardware.
TPM provides hardware cryptographic operations used by BitLocker and Credential Guard but is not the firmware interface requirement - UEFI is the prerequisite that must be in place first.
SLAT is a CPU memory virtualization feature required for Hyper-V hypervisor operation and is not the firmware interface requirement for enabling UEFI-dependent Windows 10 Enterprise security features.
Concept tested: UEFI firmware requirement for Windows 10 Enterprise virtualization-based security
Source: https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity
Topics
Community Discussion
No community discussion yet for this question.