Fareeda, a system administrator, is configuring the security settings for a Generation 2 virtual machine called VM1. She enables the Trusted Platform Module (TPM). Next, she wants to encrypt the virtual hard disks for VM1 so that other virtual machines are restricted from using these hard disks. If the virtual hard disks are successfully encrypted, which of the following statements must be true?
A) Secure Boot is disabled by default in Generation 2 virtual machines.
B) Fareeda enabled shielding in the security settings for VM1.
C) Fareeda selected the option to Encrypt state and virtual machine traffic.
D) BitLocker contains the encryption keys.

Question

Quizplus · Accepted Answer

Option A is incorrect because Secure Boot is not disabled by default in Generation 2 virtual machines. 
Option C is incorrect because there is no such option to encrypt state and virtual machine traffic. 
Option D is incorrect because although BitLocker is used for encrypting the virtual hard disks, it does not contain the encryption keys.

Therefore, the correct answer is B because enabling shielding in the security settings of VM1 is what encrypts the virtual hard disks and restricts them from being used by other virtual machines.

Fareeda, a System Administrator, Is Configuring the Security Settings for a Generation