Exam MD-100 topic 3 question 107 discussion

Actual exam question from Microsoft's MD-100

Question #: 107
Topic #: 3

DRAG DROP
-

Your network contains an Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

BitLocker Drive Encryption (BitLocker) recovery passwords are stored in Active Directory.

User1 enables the following on Computer1:

• BitLocker on drive C
• BitLocker on a removable drive named E

Which object stores the BitLocker recovery passwords for each drive? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by flabezerra at Jan. 28, 2023, 11:32 p.m.

Comments

Submit Cancel

Windows311

2 years, 3 months ago

For drive C its indeed stored in/together with the computer object in AD, see http://www.alexandreviot.net/2015/06/10/active-directory-how-to-display-bitlocker-recovery-key/ and the image "Bitlocker Recovery Key Tab" For removable drives, user needs to store or print this on their own, see https://www.marquette.edu/its/help/security/bitlocker.shtml "4. BitLocker To Go will prompt you to generate a recovery key"

upvoted 3 times

...

CSue

2 years, 4 months ago

The recovery passwords are store in AD. Computer 1 belongs to OU2, therefore the recovery key is stored in OU2. BitLocker on a removable drive (BitLocker-ToGp) User 1 has the recovery key. Drive C: OU2 Drive E: User1

upvoted 1 times

...

flabezerra

2 years, 5 months ago

Something is wrong here. Not way to answer this without a guesswork. Computer1 for both?

upvoted 1 times

...