Your network contains two Active Directory forests named contoso.com and adatum.com.
Contoso.com contains a Hyper-V host named Server1.
Server1 is the member of a group named HyperHosts.
Adatum.com contains a server named Server2 that is configured for Admin-trusted attestation.
Server1 and Server2 run Windows Server 2016.
Contoso.com trusts adatum.com.
You plan to deploy shielded virtual machines to Server1. Which component should you install and which cmdlet
should you run on Server1?
A.
Component to install on Server1: The Active Directory Domain Services server role
B.
Component to install on Server1: The Host Guardian Hyper-V Support feature
C.
Component to install on Server1: The Host Guardian Service server role
D.
Cmdlet to run on Server1: Export-HgsGuardian
E.
Cmdlet to run on Server1: Get-HgsAttestationBaselinePolicy
F.
Cmdlet to run on Server1: Import-HgsGuardian
G.
Cmdlet to run on Server1: Set-HgsClientConfiguration
Explanation:
Key for this question is Admin-trusted attestation or (AD mode) for guarded fabric “Server1.contoso.com”, while
Server2.adatum.com is running the Host Guardian
Service.
https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricguarded-host-prerequisites
https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricconfirm-hosts-can-attest-successfully
