Exam MD-100 topic 3 question 20 discussion

Actual exam question from Microsoft's MD-100

Question #: 20
Topic #: 3

HOTSPOT -
Your domain contains a Computer named Computer1 that runs Windows 10. Computer1 does not have a TPM.
You need to be able to encrypt the C drive by using BitLocker Drive Encryption (BitLocker). The solution must ensure that the recovery key is stored in Active
Directory.
Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#bkmk-rec1

by TrustMebro at Dec. 4, 2021, 8:27 p.m.

Comments

Submit Cancel

TrustMebro

Highly Voted 3 years, 6 months ago

This is correct, tested by myself. Please give a like for the other learners !!

upvoted 55 times

...

51007

Most Recent 3 years, 2 months ago

Why are we using 'local group policy' if it's on the Domain?

upvoted 1 times

...

Tommo

3 years, 3 months ago

This is correct

upvoted 2 times

...

xian05

3 years, 3 months ago

Across the internet the option: "Require additional authentication at startup" seems to be the given answer. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#require-additional-authentication-at-startup The second option "Choose how BitLocker-protected operating system drives can be recovered" is for the AD connection of the question. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#choose-how-bitlocker-protected-operating-system-drives-can-be-recovered

upvoted 2 times

...