Which two actions should you perform?

You have a Hyper-V host named Hyper1 that has a virtual machine named FS1. FS1 is a file server that contains sensitive data.
You need to secure FS1 to meet the following requirements:
Prevent console access to FS1.
Prevent data from being extracted from the VHDX file of FS1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Disable all the Hyper-V integration services for FS1.
B. On Hyper1, enable BitLocker Drive Encryption (BitLocker) for the drive that contains the VHDX file for FS1.
C. Disable the virtualization extensions for FS1.
D. Enable shielding for FS1.
E. Enable BitLocker Drive Encryption (BitLocker) for all the volumes on FS1.