Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice Exam & Study Guide

To enable Secure Boot functionality, the appropriate choice is Generation 2 Hyper-V virtual machines. Generation 2 VMs leverage UEFI firmware instead of the traditional BIOS that Generation 1 VMs utilize. UEFI supports more advanced features like Secure Boot, which helps protect the boot process by ensuring that only trusted software is allowed to run during startup.

Secure Boot is integral to modern security practices, particularly in environments that require safeguarding against unauthorized access and malware. The UEFI firmware in Generation 2 VMs can validate the digital signatures of boot loaders and operating systems, which is essential for this functionality. This advantage makes Generation 2 VMs ideal for environments that aim to implement enhanced security features, including Secure Boot.

In contrast, Generation 1 VMs do not have this capability as they are limited to traditional BIOS-based architecture, which does not support Secure Boot. Therefore, the answer hinges on the UEFI capabilities that are inherent to Generation 2 Hyper-V VMs.