Exam MD-101 topic 4 question 23 discussion

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-requirements#hardware-and-software-requirements "Windows hypervisor (does NOT require Hyper-V Windows Feature to be installed)" It used to be a requirement in legacy Win10 versions however: https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage#add-the-virtualization-based-security-features "Starting with Windows 10, version 1607 and Windows Server 2016, enabling Windows features to use virtualization-based security is not necessary and this step can be skipped. If you are using Windows 10, version 1507 (RTM) or Windows 10, version 1511, Windows features have to be enabled to use virtualization-based security." So I don't think you're gonna see this question on the exam anymore. If you do, select A. Hyper-V and party like it's 2015.

Windows Defender Credential Guard can be enabled either by using Group Policy, the registry, or the Hypervisor-Protected Code Integrity (HVCI) and Windows Defender Credential Guard hardware readiness tool. Windows Defender Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. The same set of procedures used to enable Windows Defender Credential Guard on physical machines applies also to virtual machines. Add the virtualization-based security features to an offline image by using DISM Open an elevated command prompt. Add the Hyper-V Hypervisor by running the following command: dism /image:<WIM file name> /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor /all Add the Isolated User Mode feature by running the following command: dism /image:<WIM file name> /Enable-Feature /FeatureName:IsolatedUserMode https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage