B is definitely correct. Screen lock timeout sets a length of inactivity before the PC locks itself. Lock requires password on wake. Require screensavers says nothing about including Password on Wake

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/interactive-logon-smart-card-removal-behavior Configure the Interactive logon: Smart card removal behavior setting to Lock Workstation. If you select Lock Workstation for this policy setting, the device locks when the smart card is removed. Users can leave the area, take their smart card with them, and still maintain a protected session. This behavior is similar to the setting that requires users to log on when resuming work on the device after the screen saver has started.

The answer should be D but seen as these exams only want their answers I guess B would be correct

The answer is correct. First, in any case, you need to set up Screen lock timeouts, and then set up a strong password. There will be no sense in a strong password if it is not requested

A and C are obviously incorrect but not sure why D wouldnt also be correct. Can someone give some insights to why B/D?

D is correct

I think, screen lock time out enables further security as opposed to required screensavers.

me, too. C

Screen-Lock-timeout is just the time until the already locked screen turns off.. it does nothing for security. It should be B for a more secure multifactor authentication or C - if the screensaver needs a password to access pc after it started. I would tend to C