Your network contains one Active Directory domain named contoso.com. The domain contains a server named Server01 that runs Windows Server 2012 R2. Server01 does not have a Trusted Platform Module (TPM).
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on the operating system drive.
Which Group Policy setting should you configure?
A. Allow network unlock at startup.
B. Enforce drive encryption type on operating system drives.
C. Allow enhanced PINs for startup.
D. Require additional authentication at startup.
