Your company has a Microsoft $365$ E$5$ subscription and uses Intune for Windows $11$ device management.

You deploy a compliance policy that performs the following:

Evaluates the status of BitLocker on each device.

Specifies non$-$compliant status if BitLocker is disabled.

You need to ensure that access to cloud apps is blocked for any user using a non$-$compliant device.

What should you do configure from the Microsoft Intune admin center?