Exam 70-744 topic 1 question 83 discussion

Actual exam question from Microsoft's 70-744

Question #: 83
Topic #: 1

You plan to enable Credential Guard on four servers. Credential Guard secrets will be bound to the TPM.
The servers run Windows Server 2016 and are configured as shown in the following table.

You need to identify which server you must modify to support the planned implementation.
Which server should you identify?

A. Server1
B. Server2
C. Server3
D. Server4

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements

by Ario at April 5, 2020, 6:05 p.m.

Comments

Submit Cancel

Ario

Highly Voted 5 years, 2 months ago

C is correct answer - we need install hype-v after identify it

upvoted 8 times

cochy

5 years, 1 month ago

Yep, but the linked web page tells you more about the VBS requirements like: "Windows hypervisor (does not require Hyper-V Windows Feature to be installed)"

upvoted 1 times

...

Timock

Most Recent 4 years, 5 months ago

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-requirements#:~:text=Credential%20Guard%20can%20protect%20secrets%20in%20a%20Hyper-V,from%20privileged%20system%20attacks%20originating%20from%20the%20host. This link will give you the info that you need but ALL of these options appear to meet the requirements listed there. I would go with C as C is the only one that MAY be an issue. Server 4 definitely appears to meet all requirements.

upvoted 1 times

...

VeiN

4 years, 5 months ago

According to variation of this question (or maybe the right version?) Server 1,2 and 3 won`t work with this setup. https://www.briefmenow.org/microsoft/which-of-the-above-server-you-could-enable-credential-guard/

upvoted 1 times

...

SamsOtro

4 years, 6 months ago

Agree with C

upvoted 3 times

...

KidCastaldo

4 years, 7 months ago

Reference seems to support modifying Server 3. Credential Guard requires Virtualization-based security. Virtualization-based security requires Windows Hypervisor.

upvoted 2 times

...

thissiteisgreat

4 years, 9 months ago

Answer D is correct. Because you have to identify whether the Hyper-V VM has enabled vTPM or not, which is a requirement for credential guard on a VM according to the provided link

upvoted 3 times