MDM updates the login password only. ThemacOS Security Overviewstates, "When MDM changes the password of a secure token-enabled account, only the login password is updated; the secure token remains tied to the original password unless explicitly reset." Option C is incorrect due to this separation.
References:
macOS Security Overview, "Secure Token" section.
Mobile Device Management Protocol Reference, "Password Management" section.