Your network contains an Active Directory domain named contoso.com. The domain contains a
virtual machine named Server1 that runs Windows Server 2012 R2.
Server1 has a dynamically expanding virtual hard disk that is mounted to drive E.
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on drive E.
Which command should you run?
A.
manage-bde -protectors -add c: -startup e:
B.
manage-bde -lock e:
C.
manage-bde -protectors -add e: -startupkey c:
D.
manage-bde -on e:
Explanation:
Manage-bde: on
Encrypts the drive and turns on BitLocker.
Example:
The following example illustrates using the -on command to turn on BitLocker for drive C and add a
recovery password to the drive.
manage-bde –on C: -recoverypassword
When i tried option D in lab i got the following error:
“Volume E: [Allfiles]
[Data Volume]
ERROR: An error occurred (code 0x803100a5)
Bitlocker Drive Encryption only supports Used Space Only encryption on thin provisioned storage.”
So i think correct answer is C, unless you use “-UsedSpaceOnly” parameter on D. In lab, when i tried option D combined with “-UsedSpaceOnly”, it encrypted the drive. Let’s see how is the question in the real exam…
https://technet.microsoft.com/en-us/library/ff829873.aspx
I agree the answer is C.
D does not work b/c it is an expanding drive. C is the answer
If you whant to decript:
manage-bde -protectors -get C: #show all keys
manage-bde -off C: #start decrepting
manage-bde -status c: #show the status till 100%
Based on:
https://technet.microsoft.com/en-us/library/ff829848.aspx#BKMK_addprotectors
manage-bde -protectors -add e: -startupkey c:
will “Adds key protection methods as specified by using additional” on ”
Represents a drive letter followed by a colon.”
and
“-startupkey Adds an external key protector for startup. You can also use -sk as an abbreviated version of this command.”
B. doesn’t exists
A. mable is written rong!! “-startupkey
Adds an external key protector for startup. You can also use -sk as an abbreviated version of this command.”
No test!!
in my opinion, all are RONG, but the closest in still D