Exam MD-100 topic 3 question 66 discussion

I tested to use an encrypted usb drive on a computer where haven't any encrypted drives, and I could enable the automatic unlock, for me, you can use any computer.

You can turn on automatic unlock usb device on all computers. https://winaero.com/turn-on-auto-unlock-for-bitlocker-drive-in-windows-10/

c is correct you don't need a TPM all you need is for your drive to be encrypted to automatically unlock it. Computer 1 can automatically unlock USBDrive1 because it has BitLocker Drive Encryption enabled on its C drive, even though it doesn't have a TPM module. When you encrypt a removable drive with BitLocker to Go on a computer without a TPM, you're prompted to create a password to unlock the drive. This password is saved to a file called a "startup key" that is stored on the removable drive. When you plug the drive into a computer and enter the correct password, the startup key is used to unlock the drive. Since Computer 1 has the necessary password stored in the startup key file on USBDrive1, it can automatically unlock the drive.

So I tested this out with a flash drive. My C: is not encrypted I encrypted my flash drive and enabled Auto Unlocking. I removed the flash drive and connected it again, on the same computer, and I still needed to insert the Bitlocker Key to unlock it. So technically you can enable it, but it doesnt work? If we take the question literally we'd have to go with D, but if you take the implication that the Auto Unlock has to actually work, the answer is C

According to link below and the screenshots provided, you do not need the OS drive to be encrypted in order to enable automatic unlock for external USB drives. I think people are getting confused with "Fixed drives". Fixed drives are additional drives internal to the PC or an internal drive that was partitioned, not removable storage. Fixed drives do require the OS drive to be encrypted with bitlocker to enable Auto unlock. Answer: D https://4sysops.com/archives/unlock-bitlocker-encrypted-drives-with-auto-unlock-or-sid-protector/#:~:text=It%20adds%20an%20External%20Keyprotector%20to%20the%20drive%2C,%3E%20BitLocker%20Drive%20Encryptionand%20clicking%20Turn%20on%20auto-unlock.

Answer: D https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq Why am I unable to automatically unlock my drive? Automatic unlocking for fixed data drives requires the operating system drive to also be protected by BitLocker. If you are using a computer that does not have a BitLocker-protected operating system drive, the drive cannot be automatically unlocked. For removable data drives, you can add automatic unlocking by right-clicking the drive in Windows Explorer and clicking Manage BitLocker. You will still be able to use the password or smart card credentials you supplied when you turned on BitLocker to unlock the removable drive on other computers.

I will stick to C, had a similar question in MS-500 which also had the same explanation as this.

https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2019-ps

tested it is d

tested as well - D

Description The Enable-BitLockerAutoUnlock cmdlet enables automatic unlocking for a volume protected by BitLocker Disk Encryption. You can configure BitLocker to automatically unlock volumes that do not host an operating system. After a user unlocks the operating system volume, BitLocker uses encrypted information stored in the registry and volume metadata to unlock any data volumes that use automatic unlocking. https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2022-ps

I would agree. Bitlocker to Go - D

Windows To Go is removed in Windows 10, version 2004 and later operating systems. The feature does not support feature updates and therefore does not enable you to stay current. It also requires a specific type of USB that is no longer supported by many OEMs.

tested on several Vm (workgroup, domain, with bitlocker active and not). Finally , it's possiible to auto unlock even if computer is not encrypted. Tried on old Windows 7 too, its work (just ask for bitlocker password to unlock the usb drive).

Correct. Auto unlock works only if system drive encrypted as well.

what if, the computers have an operating system on each drive