You want to allow a computer without a TPM chip that is running Windows 7 Enterprise to utilize BitLocker to protect its hard disk drive. Which of the following policy should you configure?
A)Allow Enhanced PINs for Startup
B)Configure TPM Platform Validation Profile
C)Require Additional Authentication at Startup
D)Configure Minimum PIN Length for Startup

Question

Quizplus · Accepted Answer

You should configure Require Additional Authentication at Startup to allow a computer without a TPM chip that is running Windows 7 Enterprise to utilize BitLocker to protect its hard disk drive.
Key Takeaway: If you want to use BitLocker without a TPM or to require an additional authentication method with the TPM, click Start, type gpedit.msc in the Search programs and files box, and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want and then click Yes. In the console tree under Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption, click Operating System Drives. To configure authentication methods in addition to the TPM, in the details pane, double-click Require additional authentication at startup to open the policy setting and then click Enabled.

You Want to Allow a Computer Without a TPM Chip