Which two configurations should you perform in the device enrollment restrictions?

Your company uses Microsoft Intune to manage devices.

You need to ensure that only Android devices that use Android work profiles can enroll in intune.

Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.
A . From Platform Settings, set Android device administrator Personally Owned to Block.
B . From Platform Settings, set Android Enterprise (work profile) to Allow.
C . From Platform Settings, set Android device administrator Personally Owned to Allow
D . From Platform Settings, set Android device administrator to Block.

View Answer

Answer: AB

Explanation:

To ensure that only Android devices that use Android work profiles can enroll in Intune, you need to perform two configurations in the device enrollment restrictions. First, you need to set Android device administrator Personally Owned to Block. This prevents users from enrolling personal Android devices that use device administrator mode. Second, you need to set Android Enterprise (work profile) to Allow. This allows users to enroll corporate-owned or personal Android devices that use work profiles.

Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set