Microsoft 70-680 MSCA Exam Prep

Answer - C - You should configure Require Additional Authentication at Startup to allow a computer without a TPM chip that is running Windows 7 Enterprise to utilize BitLocker to protect its hard disk drive.

Key Takeaway: If you want to use BitLocker without a TPM or to require an additional authentication method with the TPM, click Start, type gpedit.msc in the Search programs and files box, and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want and then click Yes. In the console tree under Local Computer PolicyComputer ConfigurationAdministrative TemplatesWindows ComponentsBitLocker Drive Encryption, click Operating System Drives. To configure authentication methods in addition to the TPM, in the details pane, double-click Require additional authentication at startup to open the policy setting and then click Enabled.