Which cmdlet should you run?

Your network contains an Active Directory domain. You plan to run shielded virtual machines. You are implementing TPM attestation mode for a guarded fabric. You create a Code Integrity policy named Integrity1.xml. You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.

Which cmdlet should you run?
A . Add-SignerRule
B . Add-HgsAttestationTpmHost
C . Set-HVCIOptions
D . ConvertFrom-CIPolicy

View Answer

Answer: B

Explanation:

References:

https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-tpm­trusted-attestation-capturing-hardware#create-and-apply-a-code-integrity-policy