Title: Lesson 18: Quiz
Course: RITA MC - ITNW 1308 > Section: Lesson 18: Configuring Security for Mobile Devices

Q: What options do you have for implementing BitLocker Drive Encryption? (Choose all that apply.)
- Encrypt documents only
- Encrypt startup files only
- Encrypt entire drive
- Encrypt used disk space only
A: Encrypt entire drive; Encrypt used disk space only
Feedback: When encrypting a fixed disk, storage pool, or removable media, there are two options: - Encrypt used disk space only: This option encrypts only the part of the drive that currently has data stored on it. - Encrypt entire drive: This option encrypts the full volume and offers more security because it will encrypt areas that contain data that has been deleted but may still be retrievable from the drive.

Q: When you encrypt the drive where the Windows operating system is installed, BitLocker must store the keys it uses to encrypt/decrypt on a separate piece of hardware. Where can the keys be stored? (Choose all that apply.)
- Local file system
- TPM v1.2 or later chip
- USB flash drive
- Network share
A: TPM v1.2 or later chip; USB flash drive
Feedback: When you encrypt the drive where the Windows operating system is installed, BitLocker must store the keys it uses to encrypt/decrypt on a separate piece of hardware. The keys can be stored on a Trusted Platform Module (TPM) version 1.2 (or later) microchip or on a removable USB flash drive.

Q: Of the listed BitLocker authentication methods, which is considered to be the most secure?
- TPM + startup key
- TPM + startup PIN + startup key
- TPM only
- TPM + startup PIN
A: TPM only
Feedback: TPM only is considered to be the most secure method of BitLocker authentication. When using this method, the system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.

Q: Of the listed BitLocker authentication methods, which is considered to be the least secure?
- TPM + startup PIN
- TPM + startup PIN + startup key
- TPM + startup key
- Startup key only
A: TPM + startup PIN + startup key
Feedback: TPM + startup PIN + startup key is considered to be the least secure method of BitLocker authentication. When using this method, the system stores the BitLocker volume encryption key on the TPM chip, but an administrator must supply a PIN and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.

Q: In order to use BitLocker Drive Encryption, how much free space will be required on your system partition?
- 10 GB
- 1 GB
- 10 MB
- 100 MB
A: 100 MB
Feedback: BitLocker holds files needed to start your computer on one partition. This is called the system partition and needs to be a minimum of 100 MB in size. This partition is not encrypted. The second partition, encrypted by BitLocker, holds the operating system. This allows BitLocker to protect the operating system and the information in the encrypted drive and to perform its pre-startup authentication steps and verify system integrity.

Q: BitLocker to Go can be used to encrypt removable storage data drives that are formatted with which of the following file systems? (Choose all that apply)
- NTFS
- FAT32
- exFAT
- GPFS
A: NTFS; FAT32; exFAT
Feedback: BitLocker to Go is BitLocker Drive Encryption on removable data drives. This includes Secure Digital (SD) cards, USB flash drives, and external hard disk drives. These drives can be formatted with NTFS, FAT16, FAT32, or exFAT file systems.

Q: When using BitLocker to Go, which of the following that is typically associated with BitLocker is not required to unlock the drive?
- A TPM chip
- A password
- A smart card with a PIN
- Administrative access to the computer
A: A TPM chip
Feedback: BitLocker to Go enables you to use the encrypted device on other computers without performing an involved recovery process. Because the system is not using the removable drive as a boot device, a TPM chip is not required.

Q: The Windows Location Provider uses what to try and determine your geographic location? (Choose all correct answers)
- Wi-Fi triangulation
- Time offset
- IP address resolution
- Locale settings
A: Wi-Fi triangulation; IP address resolution
Feedback: Wi-Fi triangulation involves using information provided by the Wi-Fi Access point. A Wi-Fi Access point transmits a signal every 100 milliseconds that includes information about its identity, signal strength, media access control (MAC) address (for example, unique serial number for that piece of hardware), and its received signal strength indicator (a measure of the strength of the signal at the time it is received by a mobile device). This information is used by the WLP to calculate location information. If Wi-Fi is not available, the WLP uses IP address resolution to establish location information.