The Host Guardian Service supports two different deployments of a Guarded fabric (attestation modes). The statement below describes which mode?

The Host Guardian Service supports two different deployments of a Guarded fabric (attestation modes). The statement below describes which mode?

Guarded hosts that can run Shielded VMs are approved based on their identity, measured boot sequence and code integrity policies so that you can ensure that these hosts are only running approved code.
A . Admin-trusted attestation
B . TPM-trusted attestation

View Answer

Answer: B

Explanation:

TPM-trusted attestation offers the strongest possible protections but also requires more configuration steps. Host hardware and firmware must include TPM 2.0 and UEFI 2.3.1 with secure boot enabled.

TPM trusted attestation is the mode Microsoft recommend that you use because it offers stronger assurances but it requires that your Hyper-V hosts have TPM 2.0.