Which two configurations should you perform in the device enrollment restrictions?

Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune.

Which two configurations should you perform in the device enrollment restrictions? Each correct answer

presents part of the solution. NOTE: each correct selection is worth one point.
A . From Select platforms, set Android work profile to Allow.
B . From Configure platforms, set Android Personally Owned to Block.
C . From Configure platforms, set Android Personally Owned to Allow.
D . From Select platforms, set Android to Block.

Answer: A,D

Explanation:

https://docs.microsoft.com/en-us/InTune/enrollment-restrictions-set