Posted on

70-687 Configuring Windows 8.1 – sample exam – Q7

A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.1. Client computers use Window BitLocker Drive Encryption with a Trusted Platform Module (TPM) chip.
You need to create a Group Policy object (GPO) that will secure the TPM owner information.
Which policy setting should you configure?

A. Enable the Turn on TPM backup to Active Directory Domain Services policy setting.
B. Enable the Configure the level of TPM usage authorization information available to the registry policy setting.
C. Set the Configure the level of TPM owner authorization information available to operating system policy setting to Full.
D. Enable the Configure TPM platform validation profile policy setting.

Correct Answer: A

Explanation:
http://technet.microsoft.com/en-us/library/jj679889.aspx Trusted Platform Module Services Group Policy Settings
If you enable this policy setting, TPM owner information will be automatically and silently backed up to AD DS when you use Windows to set or change a TPM owner password.

TPM backup to Active Directory Domain Services policy setting

Leave a Reply

Your email address will not be published. Required fields are marked *