Microsoft has unveiled the new Surface Pro 7+ for enterprise and educational customers, an ultra-light 2-in-1 device that comes with Windows Enhanced Hardware Security features enabled by default. The new Surface PC will help defend against escalation of privilege attacks which target sensitive info stored in a device’s memory with the help of virtualization-based security (VBS) and Hypervisor-protected code integrity (HVCI) The two hardware security features will be turned on by default on all Surface devices to protect business customers’ data.
Source: https://www.bleepingcomputer.com/news/security/windows-10-hardware-security-enabled-by-default-on-new-surface-pc/