Question

The CIO wants to secure data on company laptops by implementing file encryption. The technician determines the best method is to encrypt each hard drive using Windows BitLocker. Which two things are needed to implement this solution? (Choose two.)

a. TPM (Trusted Platform Module)
b. External hard drive
c. Cloud storage
d. Antivirus software

Answer 1

To implement Windows BitLocker encryption on company laptops, a TPM is typically required for securely storing decryption keys, and having antivirus software ensures the encrypted data remains safe from malware threats. While an external hard drive and cloud storage are not necessary for BitLocker, having a TPM enhances security and convenience.

Step-by-step explanation:

To secure data on company laptops by implementing file encryption through Windows BitLocker, two essential components are required. These are:

• TPM (Trusted Platform Module): This is a hardware-based security feature that can securely store cryptographic keys that are used to unlock the drive. BitLocker often requires a TPM version 1.2 or higher to function seamlessly.
• Antivirus software: While antivirus software is not a technical requirement for BitLocker encryption, maintaining proper cybersecurity hygiene includes having antivirus software to protect against malware that could compromise the encrypted data.

It is worth noting that for devices without a TPM, BitLocker can still be used by enabling the 'BitLocker without TPM' option and using a USB flash drive as a startup key. However, having a TPM is preferred for its convenience and added security. An external hard drive and cloud storage are not required for BitLocker encryption.