Exam 220-1101 topic 1 question 154 discussion

C is the best The technician should boot into the BIOS and enable the TPM on the new motherboard to enable the system to boot again and get access to the stored data1. Boot into the BIOS and enable the TPM on the new motherboard. Explanation: After upgrading the motherboard, the TPM may need to be enabled in the BIOS in order to access the encrypted key and boot the system. Enabling the TPM on the new motherboard should allow the system to boot and provide access to the encrypted data. References: CompTIA A+ Certification Exam Guide, 220-1001, Chapter 13

A user who works with sensitive data has a computer configured with hard drive encryption. The TPM is active and hosting the encrypted key. After an upgrade to the motherboard, RAM, and video card, the hard drive is not booting, and data cannot be accessed from the hard drive. Which of the following should the technician do to enable the system to boot again and get access to the stored data? A. Use data recovery software to find and recover the hard drive information. B. Access the BIOS and select to rebuild the degraded RAID array. C. Boot into the BIOS and enable the TPM on the new motherboard. Most Voted D. Return the replaced motherboard back to the computer. Google Gemini

Given the scenario, the most appropriate action would be: C. Boot into the BIOS and enable the TPM on the new motherboard. When the motherboard is replaced, the TPM (Trusted Platform Module) settings need to be reconfigured on the new motherboard to match the previous configuration. This will allow the system to recognize the encrypted key and enable access to the hard drive data. -Copilot

he TPM was already active on the previous motherboard, the system likely doesn't recognize the TPM configuration after the hardware changes. In this case, the most appropriate step would be: D. Return the replaced motherboard back to the computer. When the motherboard is replaced, the TPM module from the previous motherboard that was managing the encryption key is no longer available. TPM modules are hardware-specific, and the encryption key stored in the original TPM cannot be accessed by the new motherboard's TPM. Returning the old motherboard (with the original TPM) would allow access to the encrypted key and the data on the drive

As long as the user has the BitLocker recovery key, they can unlock the encrypted drive even if the motherboard has been replaced. The recovery key is essential because it allows access to the encrypted data regardless of changes to the hardware, such as a new motherboard. Just make sure the TPM is enabled in the BIOS/UEFI settings, and you should be able to proceed with the recovery process.

TPM Configuration: The Trusted Platform Module (TPM) is tied to the hardware configuration. When the motherboard is replaced, the TPM settings need to be enabled on the new motherboard. This is necessary for the system to access the encrypted key and allow the hard drive to boot.

As Mike explains answer is D In order to access the data, you need to install the old motherboard back in.

https://help.avigilon.com/nvr4-fips/en-us/FIPS-NVR-PRM/NVR4-FIPS-replacing-motherboard.htm#:~:text=To%20maintain%20security%2C%20the%20TPM,system%20after%20replacing%20the%20motherboard. This link states that TPM configured on old motherboard can't be reused with new motherboard. A new motherboard would need a new TPM. Therefore, there's no point from enabling TPM on BIOS for the new motherboard (answer "C" is not valid in that case), you can still configure it (on the new motherboard) if you want security for your data, but only after you access data and suspend BitLocker then re-enabling BitLocker again after configuring TPM. In order to access data, you need to install old motherboard back.

Secure boot and drive encryption keys are locked to the TPM chip. It is best practice to load the OS up on the old motherboard and offload the data. While the question may not have mentioned a processor upgrade (as some may point out has integrated TPM), TPM has traditionally been associated with the motherboard and BIOS features.

Someone correct me if I'm wrong, but isn't the TPM bound to the original motherboard? Then as such the original motherboard would need to be put back, so the tech can then work with the data and put it in a form where a new motherboard will be able to work with it and go from there? This would suggest that 'D: Return the replaced Motherboard...' would be the correct answer. I'm confident that enabling TPM on the new motherboard would be one of the next steps moving forward, but I do not think that 'C' would fix anything for the problem as shown

The best solution therefore appears to be C. Boot into the BIOS and enable the TPM on the new motherboard. The TPM is a crucial part of hard drive encryption and needs to be activated in the new motherboard's BIOS settings for data to be accessed

D. Return the replaced motherboard back to the computer. Swapping the motherboard can disrupt the TPM association with the hard drive encryption key, causing boot problems and data inaccessibility. Reverting to the original motherboard or one that is compatible with the TPM key should resolve the issue and allow the system to boot normally, with access to the stored data. The other options are not likely to address the root cause of the problem: A. Using data recovery software: Data recovery software won't be effective in this case because the data is likely encrypted, and the issue is related to the TPM key association. B. Rebuilding the degraded RAID array: This option is not relevant because there is no mention of a RAID array in the scenario, and the issue is related to the motherboard and TPM. C. Enabling the TPM on the new motherboard: Enabling TPM on the new motherboard alone may not resolve the issue because the TPM key association needs to be restored, which often involves returning to the original or compatible motherboard.

D The TPM is a physical chip on the motherboard that stores the encryption key for the hard drive. When the motherboard is replaced, the TPM is also replaced, and the encryption key is lost. This means that the hard drive will not boot and the data cannot be accessed. The only way to access the data is to return the replaced motherboard back to the computer. The technician can then use the TPM on the old motherboard to decrypt the hard drive and access the data.

Modern computers have embedded TPM ( microprocessor ) into a motherboard. If the motherboard were upgraded, I would first go to the BIOS and enable TPM. This is a new motherboard so I would check it first. The hard drive is encrypted and needs TPM to be allowed to boot. On the other hand, the question states that " TPM is active and hosting encrypted keys" but before the motherboard was upgraded ( replaced with a new one). However, I might be wrong so please let me know what you think.

Does anyone else think it is D? The drive is encrypted and it sounds like this person did not back up his BitLocker recovery key before replacing the motherboard, otherwise he should be able to boot up the drive and access his data. I think he has no choice but to put back the old motherboard, get the recovery key off of it, then do the motherboard replacement over again.