QUESTION NO: 1You work as a desktop support technician at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. All servers on the network have Microsoft Windows Server 2008 installed and all workstations have Microsoft Windows 7 installed.The Research and Development department is working on a confidential project. The hard disks of ABC.com’s workstations have BitLocker configured for data encryption. The BitLocker password is stored on a USB drive. All encrypted workstations make use of Trusted Platform Model (TPM) chips on their motherboards.A member of the Research and Development department, named Amy Wilson, has been assigned a workstation named ABC-WS680.Amy Wilson reports that she was not able to start ABC-WS680 due to a problematic TPM chip.You have been instructed to recover the encrypted data from ABC-WS680.
Which of the following actions should you take?
A. You should consider replacing the motherboard on ABC-WS680 with a motherboard that has the same brand of TPM chip.
B. You should consider updating the BIOS on ABC-WS680.
C. You should consider making use of the BitLocker password from to access the BitLocker Drive Encryption Recovery console on ABC-WS680.
D. You should consider running WinRE on ABC-WS680.
Explanation:When the BitLocker is used in TPM only mode, it uses TPM hardware to validate the integrity of the workstation and the Operating System. If the TPM is missing or changed, then to recover data, you need to enter the BitLocker Drive Encryption Recovery console on the workstation by using the 40 digit recovery key or password stored on the USB drive to recover the data.
QUESTION NO: 2You work as a desktop support technician at ABC.com. The ABC.com network consists of a single Active Directory domain named ABC.com. ABC.com currently makes use of a computer named ABC-WS680 which runs Microsoft Windows 7. ABC-WS680 is currently used by multiple ABC.com network users who log on to the computer. You have received instruction to deny a ABC.com user named Mia Hamm access to removable devices on ABC-WS680. However, all other users who log on to ABC-WS680 must retain access to removable devices.What should you do?
A. You should consider configuring NTFS permissions in Disk Management on ABC-WS680.
B. You should consider altering the Disk Encryption settings on ABC-WS680.
C. You should consider running the Dism.exe utility on ABC-WS680.
D. You should consider accessing the local Group Policy on ABC-WS680 to altering a removable storage access policy.