What two things should you do?

Your company is deploying Chrome devices. You want to make sure the machine assigned to the employee can only be signed in to by that employee and no one else.

What two things should you do? (Choose two.)
A . Disable Guest Mode and Public Sessions.
B . Enable a Device Policy of Sign In Screen and add the employee email address.
C . Enroll a 2-Factor hardware key on the device using the employee email address.
D . Enable a User Policy of Multiple Sign In Access and add just the employee email address.
E . Enable a Device Policy of Restrict Sign In to List of Users, and add the employee email address.

Answer: A,E

Explanation:

https://support.google.com/chrome/a/answer/1375678?hl=en