Exam 70-697 topic 10 question 9 discussion

Actual exam question from Microsoft's 70-697

Question #: 9
Topic #: 10

You administer computers that run Windows 10 Enterprise and are members of an Active Directory domain. The computers are encrypted with BitLocker and are configured to store BitLocker encryption passwords in Active Directory.
A user reports that he has forgotten the BitLocker encryption password for volume E on his computer. You need to provide the user a BitLocker recovery key to unlock the protected volume.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Ask the user for his computer name.
B. Ask the user to run the manage-bde-unlock E:-pw command.
C. Ask the user for his logon name.
D. Ask the user for a recovery keyID for the protected volume.

Show Suggested Answer

Suggested Answer: AB 🗳️
A: To view the recovery passwords for a computer you would need the computer name:
✑ In Active Directory Users and Computers, locate and then click the container in which the computer is located.
✑ Right-click the computer object, and then click Properties.
✑ In the Properties dialog box, click the BitLocker Recovery tab to view the BitLocker recovery passwords that are associated with the particular computer.
B:The Manage-bde: unlock command unlocks aBitLocker-protected drive by using a recovery password or a recovery key.
References:
https://technet.microsoft.com/en-us/library/dd759200(v=ws.11).aspx http://www.concurrency.com/blog/enable-bitlocker-automatically-save-keys-to-active-directory/

by helbling at April 23, 2019, 2:22 p.m.

Comments

Submit Cancel

helbling

5 years, 7 months ago

This is a question that is subject to some debate. Certainly in industry, the correct answer would be to use the recovery ID, not a cmdlet.

upvoted 3 times

...

Exam 70-697 All Questions

View all questions & answers for the 70-697 exam

Exam 70-697 topic 10 question 9 discussion

Comments

helbling

SY0-701