nerdexam
Microsoft

70-698 · Question #80

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer…

The correct answer is B. Unified Extensible Firmware Interface (UEFI). UEFI firmware is required to enable virtualization-based security features in Windows 10 Enterprise such as Device Guard and Credential Guard.

Prepare for installation requirements

Question

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario exactly the same in each question in this series. Start of repeated scenario Your network contains a single Active Directory domain named contoso.com. All computers are members of the domain and run the 64-bit version of Windows 10 Enterprise. On a test computer named Computer_Test1, you pin several company-specific applications in a group named Contoso Apps, and then you export the start menu layout to a file named contoso.xml. You install Client Hyper-V on a computer named Computer6. You identity the following requirements:

  • Install the Hyper V feature on a computer named Computer1.
  • Use virtual smart card authentication on a computer named Computer2.
  • Enable Secure Boot on a computer named Computer3.
  • Connect a computer named Computer4 to a projector by using Miracast.
  • Ensure that a user named User 1 can use keyboard shortcuts by

pressing one key at a time.

  • Ensure that you can share the clipboard between Computer6 and the

virtual machines running on Computer6.

  • Add the Contoso Apps group to the Start menu of a computer named

Computer7. End of repeated scenario. Which hardware feature must Computer3 support.

Options

  • AData Execution Prevention (DEP)
  • BUnified Extensible Firmware Interface (UEFI)
  • CTrusted Platform Module (TPM)
  • DSecond Level Address Translation (SLAT)

How the community answered

(58 responses)
  • A
    5% (3)
  • B
    91% (53)
  • C
    2% (1)
  • D
    2% (1)

Why each option

UEFI firmware is required to enable virtualization-based security features in Windows 10 Enterprise such as Device Guard and Credential Guard.

AData Execution Prevention (DEP)

Data Execution Prevention (DEP) is a CPU and OS-level memory protection feature that prevents code execution in data regions and is not a firmware interface requirement for enterprise security features.

BUnified Extensible Firmware Interface (UEFI)Correct

UEFI replaces legacy BIOS and provides the secure firmware foundation that Windows 10 Enterprise virtualization-based security features depend on, including enabling Secure Boot and the hardware-isolated security environment used by Device Guard and Credential Guard. These enterprise security capabilities explicitly require UEFI firmware - a system still running legacy BIOS cannot support them regardless of other hardware.

CTrusted Platform Module (TPM)

TPM provides hardware cryptographic operations used by BitLocker and Credential Guard but is not the firmware interface requirement - UEFI is the prerequisite that must be in place first.

DSecond Level Address Translation (SLAT)

SLAT is a CPU memory virtualization feature required for Hyper-V hypervisor operation and is not the firmware interface requirement for enabling UEFI-dependent Windows 10 Enterprise security features.

Concept tested: UEFI firmware requirement for Windows 10 Enterprise virtualization-based security

Source: https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity

Topics

#UEFI#firmware requirements#Secure Boot#hardware requirements

Community Discussion

No community discussion yet for this question.

Full 70-698 Practice