You have computers that run Windows 8 Enterprise. Microsoft BitLocker Administration and
Monitoring (MBAM) is deployed on your network on a server named MBAM1.
Company policy requires that within 2 hours of being started, computers that have the
MBAM client installed prompt users to enable BitLocker.
You need to make changes to the Configure MBAM Services Group Policy settings.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A.
Set MBAM Recovery and Hardware service endpoint to MBAM1.
B.
Set Enter status reporting frequency (in minutes) to 120.
C.
Set MBAM Status reporting endpoint to MBAM1.
D.
Set Select Bitlocker Recovery Information to store to Recovery password and key
package.
E.
Set Select Bitlocker Recovery Information to store to Recovery password only.
F.
Set Enter client checking status frequency (in minutes) to 120.
This answer is A and F.
Correct Answer: B and F
A and F, not B and F.
B & F
When configuring the MBAM services via Group Policy there are two policy timers that are configured.
Client Checking Status Frequency (Default: 90 Min) ***
Status Reporting Frequency (Default: 720 Min) ***
These timers have corresponding registry settings that can be manually changed to initiate their checks immediately when the MBAM client is restarted. This is generally performed to more quickly initiate the user prompt for starting the encryption process as well as forcing the status reporting to update. These keys and the values to which they should be changed to initiate their checks are listed below.
Registry Key Path Key Name Value Description
HKLM\Software\Policies\Microsoft
\FVE
\MDOPBitLockerManagement
ClientWakeupFrequency 1 This policy setting manages how often the client will check the BitLocker protection policies and status on the client machine.
StatusReportingFrequency 1 This policy setting allows you to manage the frequency of the compliance and status information to be reported to the report service.
Answer is A and F
https://technet.microsoft.com/en-us/library/dn645338.aspx
According to https://technet.microsoft.com/en-us/library/dn645338.aspx:
“MBAM Recovery and Hardware service endpoint. Use this setting to enable MBAM Client BitLocker encryption management.”
So option A would simply enable management. Is that not implied in the question that MBAM is “deployed”?
It seems that you need both B and F so as flitter mentioned, so the clients will check in, and update compliance status. B Checks in, F updates status. If you don’t have B, can you have F?
B and F looks correct