BitLocker and TPM Configuration Assignment Answers

Question:

You work as the IT security administrator for a small corporate network. The employee in Office 1 is working on a very sensitive project. Management is concerned that if the hard drive in the computer were stolen, sensitive information could be compromised. As a result, you have been asked to encrypt the entire System volume. The Office1 computer has a built-in TPM on the motherboard. In this lab, your task is to configure BitLocker drive encryption as follows: From within the computer's BIOS, turn on and activate TPM Security. From Windows, turn on BitLocker for the System (C:) drive. Back up the recovery key to the \\CorpServer\BU-Office1 folder. Encrypt the entire System (C:) drive. Use the new encryption mode. Run the BitLocker system check.

BitLocker and TPM Configuration Answer and Explanation

Step 2: Enable BitLocker:

1. Press `Win + X` and select "Control Panel."

6. Click "Next" and choose the encryption mode. Select "Encrypt entire drive" for the highest security.

7. Choose "New encryption mode" if available.

3. Click on "Run BitLocker system check" to ensure the encryption is correctly applied and the system is in a healthy state.

Ensure you document and securely store the recovery key, as it will be essential for recovering data in case of a forgotten password or other issues.