A Company's Security Policy Requires Full Disk Encryption on All

Multiple Choice

A company's security policy requires full disk encryption on all clients with preboot enabled. The encryption server is hosted, and the requirement is to push an update to all endpoints. Which of the following is the BEST method to test and apply the update with minimal disruption to end users?

A) Access the API of the encryption server, develop a custom script, and then update all endpoints.
B) Access the web UI portal of the encryption server, apply the update to the test group, validate, and then update all endpoints.
C) Add the update to the standard desktop configuration image, apply the update to a test VM, and then reimage clients.
D) Access the web UI of the encryption server and disable preboot, apply the update, test, and then deploy the update to all endpoints.