Explanation
The best option to help the administrator secure the corporate resources is B. Biometric scanner.
A biometric scanner is a device that can authenticate a user's identity based on their physical or behavioral characteristics, such as fingerprint, iris, face, voice, or signature. A biometric scanner can provide a high level of security and convenience for accessing corporate laptops, as it can prevent unauthorized users from accessing the devices and eliminate the need to remember passwords .
The other options are not the best options for this scenario. A Trusted Platform Module (TPM) is a chip that can store encryption keys and other sensitive data on a laptop. A TPM can enhance the security of data and devices, but it does not limit access to authorized users by itself. A TPM can work with a password or a biometric scanner to provide multifactor authentication . A laptop lock is a device that can physically secure a laptop to a desk or other object using a cable and a lock. A laptop lock can deter theft or tampering, but it does not prevent unauthorized users from accessing the laptop if they have the password or the key. Encryption is a process that can protect data on a laptop by transforming it into an unreadable format using a key. Encryption can prevent unauthorized users from accessing or modifying the data, but it does not prevent them from accessing the laptop itself.