What should you do first?

You need to enable BitLocker Drive Encryption (BitLocker) on a computer named Computer1 that runs Windows 10.

Computer1 has the following configurations:

✑ Contains only one 200-GB NTFS volume named C:

✑ Contains 50 GB of unallocated disk space

✑ Is the member of a workgroup

✑ Has TPM enabled

What should you do first?
A . Create a VHD.
B. Disable TPM.
C. Create an additional volume.
D. Join Computer1 to an Azure Active Directory (Azure AD) tenant.

Answer: C

Explanation:

Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive.

Reference: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq