nerdexam
Microsoft

70-686 · Question #105

70-686 Question #105: Real Exam Question with Answer & Explanation

The correct answer is D. Extend the Active Directory schema.. BitLocker Drive Encryption Configuration Guide: Backing Up BitLocker and TPM Recovery Information to Active Directory This section provides information about how BitLocker and TPM recovery information can be backed up in Active Directory. By default, no recovery information is ba

Question

You have a single Active Directory domain. All domain controllers run Windows Server 2003 with Service Pack 1 (SP1). You plan to store Windows BitLocker Drive Encryption recovery passwords in Active Directory. You need to recommend the solution that uses the least amount of administrative effort. What should you recommend?

Options

  • AUpgrade the domain controller that has the role of operations master to Windows Server
  • BUpgrade all domain controllers to Windows Server 2008 R2.
  • CUpgrade all domain controllers to Windows Server 2003 SP2.
  • DExtend the Active Directory schema.

Explanation

BitLocker Drive Encryption Configuration Guide: Backing Up BitLocker and TPM Recovery Information to Active Directory This section provides information about how BitLocker and TPM recovery information can be backed up in Active Directory. By default, no recovery information is backed up. Administrators can configure Group Policy settings to enable backup of BitLocker or TPM recovery Before configuring these settings, as a domain administrator you must ensure that the Active Directory schema has been extended with the necessary storage locations and that access permissions have been granted to perform the backup.

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-686 Practice