Your network has a single domain with 1,000 client computers that run Windows 7.
Users frequently copy data from their computers to removable drives.
You need to ensure that data that is copied to removable drives is protected.
What should you do?

A.
Use Encrypting File System (EFS).

B.
Enable Trusted Platform Module (TPM) hardware on all client computers.

C.
Use Active Directory Rights Management Services.

D.
Configure a Group Policy to enforce the use of BitLocker To Go.

Explanation:
BitLocker to Go extends BitLocker data protection to USB storage devices, enabling them to be restricted with a
passphrase.
In addition to having control over passphrase length and complexity, IT administrators can set a policy that
requires users to apply BitLocker protection to removable drives before being able to write to them.
http://www.microsoft.com/en-us/windows/enterprise/products-and-technologies/windows- 7/features.
aspx#bitlocker