thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

BitLocker

Microsoft Windows full-volume encryption feature that can use a TPM to protect keys.

Definition

BitLocker encrypts OS and data volumes with XTS-AES and can require TPM-only, TPM+PIN, or TPM+startup key authentication. Recovery keys can be escrowed to Active Directory, Microsoft Entra ID, or a Microsoft account. BitLocker To Go protects removable drives.

Example

manage-bde -status shows the encryption state and protectors for each drive.

Exam tip

BitLocker requires a TPM for seamless boot integrity checks; TPM+PIN adds pre-boot authentication.

Related terms