DRAG DROP
A company has an Active Directory Domain Services (AD DS) domain. All client computers
run Windows 8. Some computers have a Trusted Platform Module (TPM) chip. Members of
the ITStaff security group are part of the local Power Users group on each client computer.
You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker
Drive Encryption on all client computers by using the least amount of privilege necessary.
Which commands should you run? (To answer, drag the appropriate command or
commands to the correct location or locations in the answer are Commands may be used
once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.)

Answer: