Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. You run Get-BitLockerVolume -MountPoint C,D | fl which…

This question tests knowledge of BitLocker Auto-Unlock for data volumes in Windows Server. The candidate must construct the correct PowerShell command to allow drive D: to unlock automatically at restart without manual intervention.

Secure Windows Server on-premises and hybrid infrastructures

Question

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. You run Get-BitLockerVolume -MountPoint C,D | fl which generates the following output.
ComputerName : SERVER1
MountPoint : C:
EncryptionMethod : None
AutoUnlockEnabled : False
AutoUnlockKeyStored :
MetadataVersion : 0
VolumeStatus : FullyDecrypted
ProtectionStatus : Off
LockStatus : Unlocked
EncryptionPercentage : 0
WipePercentage : 0
VolumeType : OperatingSystem
CapacityGB : 126.5107
KeyProtector : {}
You need to ensure that volume D will be unlocked automatically when Server1 restarts. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation

Approach. The correct command is Enable-BitLockerAutoUnlock -MountPoint "D:". This cmdlet enables the Auto-Unlock feature for a BitLocker-protected data volume by storing an encrypted copy of the data volume's unlock key on the OS drive (C:). When the server restarts and the OS volume unlocks (typically via TPM), Windows automatically uses that stored key to unlock D: as well. This eliminates the need for a manually entered password or key on every reboot - critical for unattended server restarts.

Concept tested. BitLocker Auto-Unlock (Enable-BitLockerAutoUnlock) for data volumes - understanding that auto-unlock ties a data volume's key to the already-protected OS volume, enabling headless/unattended restarts without sacrificing encryption on secondary drives.

Reference. Microsoft Learn: Enable-BitLockerAutoUnlock (BitLocker PowerShell reference) - https://learn.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock

Topics

#BitLocker#Automatic Unlock#Data Encryption#Windows Server Security

Community Discussion

No community discussion yet for this question.

Full AZ-801 Practice