You have a Microsoft 365 subscription and Microsoft 365 E5 licenses assigned to your users. Your devices are enrolled into Microsoft Endpoint Manager, and you configure Device Configuration Profiles. You need to create a profile to manage Bitlocker on your devices. 
What should you configure?

Answer options:

A.App protection policy
B.Compliance Policy
C.Enrollment Restrictions
D.Endpoint protection

Correct Answer: D 
You should create a Device configuration profile and add an Endpoint protection setting for managing Bitlocker. 

Option A is incorrect. This is for protecting access to organizational data. 
Option B is incorrect. This is for determine if devices are compliant or not.
Option C is incorrect. Defines which platforms, versions, and management types can enroll.
Reference: 
To know more about enabling bitlocker through endpoint protection, please refer to the link below: 

https://docs.microsoft.com/en-us/mem/intune/protect/encrypt-devices