Câu 11: 70-697: Configuring Windows Devices

A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise. Some computers have a Trusted PlatformModule (TPM) chip. You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption on all client computers. Which two actions should you perform? Each correct answer presents part of the solution.

1. A. Enable the Require additional authentication at startup policy setting. — đáp án hiện tại
2. B. Enable the Enforce drive encryption type on operating system drives policy setting.
3. C. Enable the option to allow BitLocker without a compatible TPM. — đáp án hiện tại
4. D. Configure the TPM validation profile to enable Platform Configuration Register indices (PCRs) 0, 2, 4, and 11.