BitLocker in Windows Server 2008 protects which drives and how is it typically implemented?

• A. BitLocker protects network communications.
• B. BitLocker protects only the OS drive using a password.
• C. BitLocker protects the OS drive and data drives via full-disk encryption, typically using a TPM.
• D. BitLocker protects application data in memory.

Answer: (C)

BitLocker is full-disk encryption that protects data at rest on Windows Server 2008. It encrypts both the operating system drive and fixed data drives, and is typically implemented with a trusted platform module (TPM) that stores the encryption keys and helps verify the boot environment. With TPM-based protection, the OS drive can be unlocked automatically at boot, and fixed data drives remain encrypted until access is required, keeping their contents unreadable if the server is off or stolen. This is about protecting disks, not network traffic or in-memory data, so it’s not about securing communications or RAM-resident information. Optional startup authentication (like a PIN or USB key) can add extra security beyond the TPM, but using a TPM is the common deployment.