Question

You would like to implement BitLocker to encrypt data on a hard disk, even if it is moved to another system. You want the system to boot automatically without providing a startup key on an external USB device.

What should you do?
a) Use a PIN instead of a startup key.
b) Save the startup key to the boot partition.
c) Disable USB devices in the BIOS.
d) Enable the TPM in the BIOS.

Answer 1

To use BitLocker encryption without an external startup key, enable the TPM in the BIOS, allowing the system to boot automatically while keeping the data secure.

Step-by-step explanation:

To implement BitLocker encryption on a hard disk and allow the system to boot automatically without a startup key on an external USB device, you should enable the TPM (Trusted Platform Module) in the BIOS. This option is designed to work with the TPM, which stores the encryption keys securely and releases them only if the system's boot components are unchanged. Using a TPM alone allows for automatic booting of the system while still maintaining encryption without needing a PIN or a startup key on an external device.