BitLocker, BitLocker-To-Go, and EFS for A+
Short answer
BitLocker protects entire volumes and is appropriate for protecting data if a drive is removed or a device is lost; BitLocker-To-Go secures USB/removable media. EFS encrypts individual files for a user account, useful for protecting specific files on an already-running system. Technicians should know how to identify which method is in use and which to recommend for scenarios such as lost laptop vs shared encrypted documents.
Why it appears on the exam
- Given scenario (lost laptop vs USB drive), select BitLocker or BitLocker-To-Go or EFS. - Identify where to check if BitLocker is enabled and whether a recovery key has been backed up.
Key concepts
Concept 1
Required terms
BitLocker: Full-volume encryption for fixed or system drives that uses TPM and can require a recovery key for unlocking if configuration changes or authentication fails. BitLocker-To-Go: BitLocker variant for removable drives (USB) providing encryption and optional password unlocking on other devices. Encrypting File System (EFS): File-level encryption on NTFS that ties encrypted files to a user account and certificate, protecting files at rest for specific users on a machine. BitLocker: full-volume encryption, TPM-backed, recovery key.
Example
For a stolen laptop: verify BitLocker is enabled and recovery key backup is available.
Concept 2
How BitLocker, BitLocker-To-Go, and EFS works
BitLocker protects entire volumes and is appropriate for protecting data if a drive is removed or a device is lost; BitLocker-To-Go secures USB/removable media. EFS encrypts individual files for a user account, useful for protecting specific files on an already-running system. Technicians should know how to identify which method is in use and which to recommend for scenarios such as lost laptop vs shared encrypted documents.
Example
For confidential documents on a shared computer: apply EFS to bind files to a user account.
Concept 3
Common confusion
Expecting BitLocker to protect data when the machine is running and unlocked; BitLocker primarily protects data at rest. Confusing EFS with BitLocker and expecting EFS to protect files when the encrypting user is signed in.
Example
For a stolen laptop: verify BitLocker is enabled and recovery key backup is available.
Concept 4
Core 2 (220-1202) question cues
Given scenario (lost laptop vs USB drive), select BitLocker or BitLocker-To-Go or EFS; Identify where to check if BitLocker is enabled and whether a recovery key has been backed up.
Example
For confidential documents on a shared computer: apply EFS to bind files to a user account.
Sample questions
Select an answer to reveal the explanation. For tracked practice and weak-area review, use the Cultiv8 app.
Q1.In an A+ question, this detail appears: For a stolen laptop: verify BitLocker is enabled and recovery key backup is available. Which option matches it?
Q2.For this A+ objective, the scenario says: For confidential documents on a shared computer: apply EFS to bind files to a user account. What is the best match?
Q3.A user reports this support situation: File-level encryption on NTFS that ties encrypted files to a user account and certificate, protecting files at rest for specific users on a machine. Which option should the technician choose?
Practice this lesson in Cultiv8
The app adds tracked practice, targeted remediation, saved session history, and future readiness scoring.
Continue in Cultiv8