AZ-140 · Question #174
You have an Azure Virtual Desktop deployment. You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts. You need to enable secure boot and vTPM on the session…
The correct answer is B. Set Security type to Trusted launch virtual machines. Secure Boot and vTPM are security features available exclusively on Azure 'Trusted launch' virtual machines. When creating a VM in the Azure portal, setting 'Security type' to 'Trusted launch virtual machines' enables both Secure Boot (which prevents unauthorized boot loaders…
Question
You have an Azure Virtual Desktop deployment. You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts. You need to enable secure boot and vTPM on the session hosts. How should you configure the Virtual Machines settings?
Options
- AEnable encryption at rest and a platform-managed key.
- BSet Security type to Trusted launch virtual machines.
- CEnable a system-assigned managed identity.
- DSet Network security group to Advanced.
How the community answered
(29 responses)- B93% (27)
- C3% (1)
- D3% (1)
Explanation
Secure Boot and vTPM are security features available exclusively on Azure 'Trusted launch' virtual machines. When creating a VM in the Azure portal, setting 'Security type' to 'Trusted launch virtual machines' enables both Secure Boot (which prevents unauthorized boot loaders and OS kernels from loading) and vTPM (a virtualized Trusted Platform Module for attestation and key storage). Option A (encryption at rest with platform-managed key) is a disk encryption feature unrelated to Secure Boot/vTPM. Option C (system-assigned managed identity) is for Azure RBAC access, not security boot features. Option D (Advanced NSG) is a network security setting with no effect on VM boot integrity.
Topics
Community Discussion
No community discussion yet for this question.