Which Group Policy object (GPO) setting should you configure?

You have a client Windows 10 Enterprise computer. The computer is joined to an Active Directory domain.
The computer does not have a Trusted Platform Module (TPM) chip installed.
You need to configure BitLocker Drive Encryption (BitLocker) on the operating system drive.
Which Group Policy object (GPO) setting should you configure?

A.
Allow access to BitLocker-protected fixed data drives from earlier version of Windows.

B.
Require additional authentication at startup.

C.
Allow network unlock at startup.

D.
Configure use of hardware-based encryption for operating system drives.