what should you recommend on each branch office domain controller enable windows bitlocker drive encryption (bitlocker)