Which policy setting should you configure?

A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.
Client computers use Window BitLocker Drive Encryption with a Trusted Platform Module (TPM) chip.
You need to create a Group Policy object (GPO) thatwill secure the TPM owner information.
Which policy setting should you configure?

A.
Enable the Turn on TPM backup to Active DirectoryDomain Services policy setting.

B.
Enable the Configure the level of TPM usage authorization information available to the registry policy
setting.

C.
Set the Configure the level of TPM owner authorization information available to operating system policy
setting to Full.

D.
Enable the Configure TPM platform validation profile policy setting.

Explanation:
http://technet.microsoft.com/en-us/library/jj679889.aspx