A company has an Active Directory Domain Services (AD DS) domain.
All client computers run Windows 10 Enterprise. Some computers have a Trusted Platform Module (TPM)
chip.
You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive
Encryption on all client computers.
Which two actions should you perform? Each correct answer presents part of the solution.