Windows 10 (legacy) — Question 11

You have 10 computers that run Windows 10 and have BitLocker Drive Encryption (BitLocker) enabled.
You plan to update the firmware of the computers.
You need to ensure that you are not prompted for the BitLocker recovery key on the next restart. The drive must be protected by BitLocker on subsequent restarts.
Which cmdlet should you run?

Answer options

Correct answer: D

Explanation

The correct answer is D, Suspend-BitLocker, as this cmdlet temporarily pauses BitLocker protection, allowing firmware updates without needing the recovery key. Option A, Unlock-BitLocker, is used to unlock a drive, but does not suspend protection. Option B, Disable-BitLocker, would turn off encryption, which is not desired. Option C, Add-BitLockerKeyProtector, adds a key protector but does not prevent the recovery key prompt during firmware updates.