Home » Microsoft » 98-368 » This question requires that you evaluate the underlined text to determine if it is correct.
This question requires that you evaluate the underlined text to determine if it is correct.
When BitLocker is enabled and and protecting a local drive, Trusted Platform Module (TPM) provides “pre-start system integrity verification for system and operating system drives”.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice than makes the statement correct.
A. No change is needed
B. 256-bit encryption that uses Advanced Encryption Standard (AES)
C. a location that stores recovery keys for removable drives
D. boot sector mapping for the startup process
Correct Answer: C
Explanation/Reference:
Computers that incorporate a TPM have the ability to create cryptographic keys and encrypt them so that they can be decrypted only by the TPM. This process, often called “wrapping” or “binding” a key, can help protect the key from disclosure. Each TPM has a root “wrapping” key, called the Storage Root Key (SRK), which is stored within the TPM itself. The private portion of a key created in a TPM is never exposed to any other component, software, process, or person.
Reference: Windows Trusted Platform Module Management Step-by-Step Guide
https://technet.microsoft.com/en-us/library/cc749022%28v=ws.10%29.aspx
