Exam 70-744 topic 1 question 187 discussion

Actual exam question from Microsoft's 70-744

Question #: 187
Topic #: 1

Your network contains an Active Directory domain.
You plan to run shielded virtual machines.
You are implementing TPM attestation mode for a guarded fabric.
You create a Code Integrity policy named Integrity1.xml.
You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.
Which cmdlet should you run?

A. Add-SignerRule
B. Add-HgsAttestationTpmHost
C. Set-HVCIOptions
D. ConvertFrom-CIPolicy

Show Suggested Answer

Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-tpm-trusted-attestation-capturing-hardware#create-and- apply-a-code-integrity-policy

by thattanguyz at Sept. 5, 2020, 6:59 p.m.

Comments

Submit Cancel

thattanguyz

Highly Voted 4 years, 9 months ago

The correct answer is : ConvertFrom-CIPolicy https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-tpm-trusted-attestation-capturing-hardware#create-and-%20apply-a-code-integrity-policy

upvoted 7 times

KidCastaldo

4 years, 8 months ago

Yup answer is D. The given answer is a different step in the process.

upvoted 1 times

...

Yebubbleman

Most Recent 4 years, 5 months ago

D is correct. I'm wondering if whomever marked B looked at the article and zeroed in on the first answer choice that showed up in the article. Because the B answer does appear in the article. Just first and at the wrong time.

upvoted 1 times

...

SamsOtro

4 years, 6 months ago

Agree with D. ConvertFrom-CIPolicy https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps

upvoted 1 times

...