You administer computers that run Windows 10 Enterprise and are members of an Active Directory domain. The

computers are encrypted with BitLocker and are configured to store BitLocker encryption passwords in Active Directory.

A user reports that he has forgotten the BitLocker encryption password for volume E on his computer. You need to provide the user a BitL

ocker recovery key to unlock the protected volume.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Ask the user for his computer name.

B. Ask the user to run the

manage

–

bde

–

unlock E:

–

pw

command.

C. Ask the

user for his logon name.

D. Ask the user for a recovery key ID for the protected volume.

Explanation:

A: To view the recovery passwords fora computer you would need the computer name:

In Active Directory Users and Computers, locate and then c

lick the container in which the computer is located.

Right-click the computer object, and then click Properties.

In the Properties dialog box, click the BitLocker Recovery tab to view the BitLocker recovery passwords that are associated with the particular

computer.

B: The Manage-bde: unlock command unlocks a BitLocker-protected drive by using a recovery password or a recovery key.

References:

https://technet.microsoft.com/en-us/library/dd759200(v=ws.11).aspx

http://www.concurrency.com/blog/enable-bitlock

er-automatically-save-keys-to-active-directory/