az-801 Practice Question 1905
Exam: az-801
Domain: Secure Windows Server on-premises and hybrid infrastructures
Topic: Secure Windows Server operating systems
Difficulty: medium
In a scenario where you need to ensure that sensitive data on a Windows Server is protected against unauthorized access, which of the following should you implement to encrypt the drive and protect the encryption keys using hardware security modules (HSM)?
A) Enable BitLocker with TPM and configure automatic recovery key storage.
B) Install a third-party encryption software and configure it manually.
C) Use Windows Storage Spaces with RAID 5 and enable encryption.
D) Configure File History with encryption enabled.
Answer Options
A
Enable BitLocker with TPM and configure automatic recovery key storage.
B
Install a third-party encryption software and configure it manually.
C
Use Windows Storage Spaces with RAID 5 and enable encryption.
D
Configure File History with encryption enabled.
Correct Answer
A: Enable BitLocker with TPM and configure automatic recovery key storage.
Explanation
The correct answer is A. BitLocker with TPM and automatic recovery key storage provides hardware-based encryption and key protection, ensuring that the data is secure even if the server is compromised. Option B is not recommended as it involves third-party software, which may not provide the same level of security or integration with Windows features. Options C and D do not offer hardware-based encryption and key protection, making them less secure compared to BitLocker with TPM.