All client computers on your company network run Windows 7. Your company has a Windows
Server2008 domain. You plan to use Group Policy to enable BitLocker Drive Encryption (BDE).
You need to ensure that the following requirements are met:
·All BitLocker recovery keys are stored in a central location.
·Data is encrypted only after a backup of the recovery key is available.
What should you do?

A.
Run the manage-bde -on -ForceRecovery command.

B.
Enable the Choose default folder for recovery password setting.

C.
Enable the Store BitLocker recovery information in Active Directory Domain Services setting.

D.
Enable the Choose how users can recover BitLocker encrypted drives setting. Set the 256-bit
recovery key to Require recovery password.