Which devices will have BitLocker enabled?

You have a hybrid Microsoft 365 deployment that contains the Windows 10 devices shown in the following table.

You assign a Microsoft Endpoint Manager disk encryption policy that automatically and silently enables BitLocker Drive Encryption (BitLocker) on all the devices.

Which devices will have BitLocker enabled?
A . Device 1, Device2, and Device3
B . Device2 only
C . Device1 and Device2 only
D . Device2 and Device3 only

Answer: B

Explanation:

To silently enable BitLocker, the device must be Azure AD Joined or Hybrid Azure AD Joined and the device must contain TPM (Trusted Platform Module) 2.0.

Reference: https://docs.microsoft.com/en-us/mem/intune/protect/encrypt-devices