Home » Microsoft » 70-415 » What should you recommend?
You need to recommend a solution for protecting the files stored on the laptop computers of the sales users. The solution must meet the sales department requirements.
What should you recommend?
A. BitLocker Drive Encryption (BitLocker) that uses a SID-based protector
B. BitLocker Drive Encryption (BitLocker) that uses a password protector
C. Encrypting File System (EFS) that uses certificates from a certification authority (CA)
D. Encrypting File System (EFS) that uses self-signed certificates
Correct Answer: B
Explanation/Reference:
Explanation:
All of the files on the laptop computers must be encrypted.
Active Directory SID-based protector. This protector can be added to both operating system and data volumes, although it does not unlock operating system volumes in the pre-boot environment. The protector requires the SID for the domain account or group to link with the protector. BitLocker can protect a clusteraware disk by adding a SID-based protector for the Cluster Name Object (CNO) that lets the disk properly failover to and be unlocked by any member computer of the cluster.
The ADAccountOrGroup protector requires the use of an additional protector for use (such as TPM, PIN, or recovery key) when used on operating system volumes
To add an ADAccountOrGroup protector to a volume requires either the actual domain SID or the group name preceded by the domain and a backslash.
In the example below, the CONTOSOAdministrator account is added as a protector to the data volume G.
Active Directory-based protectors are normally used to unlock Failover Cluster enabled volumes.
