This is the answer, more detail: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks. Source: about 2 years ago

Make sure that you back-up the active app-configuration, this way you have an easier way to recover; make sure you are allowed to verify using more than an authenticator, more here. Source: about 3 years ago

The initial yes. Once encrypted you can trigger remote via intune/sccm/MDM https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. - Source: Hacker News / almost 2 years ago

On linux it you can achive it via LUKS, on windows with the help of bitlocker or preferably veracrypt. Source: about 2 years ago

What os are you using? If it happens to be a “pro” version of windows you could use bitlocker full-drive encryption which is built-in. There is one known vulnerability which involves gaining access to the RAM within seconds of shutdown, but that’s easily averted by keeping the computer in your possession for a minute or two after shutting it down. Source: about 2 years ago

There's additional info about bitlocker and tpm here. Source: over 2 years ago

There is also bitlocker drive encryption. That is one way to secure your data if you are worried someone can physically remove your drives. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. Source: over 2 years ago