Practice question 115 of 180 · medium
A compatible Generation 2 session-host VM will use Trusted Launch. The requirements are to validate trusted signed boot code and retain protected measured-boot data. Which features should be enabled for those respective protections?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Secure Boot.
- vTPM.
Secure Boot validates trusted boot components, while vTPM protects keys and boot measurements. Remote attestation can then use measured-boot information to assess integrity; these are distinct from cloud sign-in and disk encryption. Option explanations: A. Secure Boot.: Secure Boot supplies the trusted boot-code validation requirement. B. vTPM.: vTPM supplies the protected keys and boot-measurement capability. C. Disk encryption at rest as a replacement for boot validation.: Encryption at rest does not replace boot-chain validation or protected measured-boot storage. D. Windows Cloud Login.: Windows Cloud Login authenticates Windows sessions and does not validate the boot chain. Sources: Trusted Launch for Azure virtual machines — https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch; Security recommendations for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/security-recommendations
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.