An administrator needs to enable Windows Defender Credential Guard to comply with company policy. The new VM configurations include: Legacy BIOS 4…

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guard requires a UEFI-based boot mode rather than Legacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impact Credential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019 supports Credential Guard; upgrading to 2022 is not required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirement beyond general OS needs.

Microsoft Docs → Requirements for Windows Defender Credential Guard

Nutanix AHV VM Management Guide → Enabling Secure Boot & UEFI for Windows VMs