Exam MD-100 topic 3 question 22 discussion

Notes : The Suspend-BitLocker cmdlet suspends Bitlocker encryption, allowing users to access encrypted data on a volume that uses BitLocker Drive Encryption. This cmdlet makes the encryption key available in the clear. Suspension of BitLocker does not mean that BitLocker decrypts data on the volume. Instead, suspension makes key used to decrypt the data available to everyone in the clear. New data written to the disk is still encrypted. While suspended, BitLocker does not validate system integrity at start up. You might suspend BitLocker protection for firmware upgrades or system updates. You can specify the number of times that a computer restarts before the BitLocker suspension ends by using the RebootCount parameter, or you can use the Resume-BitLocker cmdlet to manually resume protection. If you do not specify the RebootCount parameter, the cmdlet uses a value of one (1), so BitLocker protection resumes after the next restart.

The correct cmdlet to run in this scenario is D. Suspend-BitLocker. When updating the firmware of computers with BitLocker Drive Encryption enabled, it is recommended to suspend BitLocker protection to avoid triggering the recovery mode and requiring the BitLocker recovery key. The Suspend-BitLocker cmdlet temporarily suspends BitLocker protection on the drive, allowing the firmware update to be performed without triggering the recovery mode. After the firmware update is complete, BitLocker protection can be resumed using the Resume-BitLocker cmdlet, which restores the BitLocker protection on the drive.

It's suspend. I've used this in my workplace.

D. Suspend-BitLocker

D. Suspend-BitLocker

Can anyone confirm the answer is right?

Correct. Reference link: https://docs.microsoft.com/en-us/powershell/module/bitlocker/suspend-bitlocker?view=win10-ps

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq

Looks logic