Your network contains an Active Directory domain named contoso.com. The domain contains a
virtual machine named Server1 that runs Windows Server 2012 R2.
Server1 has a dynamically expanding virtual hard disk that is mounted to drive E.
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on drive E.
Which command should you run?
A.
manage-bde -protectors -add c: -startup e:
B.
manage-bde -lock e:
C.
manage-bde -protectors -add e: -startupkey c:
D.
manage-bde -on e:
Explanation:
Manage-bde: on
Encrypts the drive and turns on BitLocker.
Example:
The following example illustrates using the -on command to turn on BitLocker for drive C and add a
recovery password to the drive.
manage-bde –on C: -recoverypassword
The answer is corrected because mounted VHD is a Data volume, not a system drive.
If you want to encrypt system drive you have two optons:
– On a computer without TPM chip you must first create protector key which is stored on USB drive.
manage-bde –protectors -add C: -startupkey E: #(E is USB drive)
manage-bde -on C:
– On computers with a TPM it is possible to encrypt the operating system volume without any defined protectors using manage-bde. The command to do this is:
manage-bde -on C:
Data volumes use the same syntax for encryption as operating system volumes but they do not require protectors for the operation to complete. Encrypting data volumes can be done using the base command: manage-bde -on or you can choose to add additional protectors to the volume first.
https://technet.microsoft.com/en-us/library/jj647767(v=ws.11).aspx
0
0