Which SEPM-generated element is required for an administrator to complete the enrollment of SEPM to the cloud console?

Which two (2) Discovery and Deploy features could an administrator use to enroll MAC endpoints? (Select two)

After editing and saving a policy, an administrator is prompted with the option to apply the edited policy to any assigned device groups.
What happens to the new version of the policy if the administrator declines the option to apply it?

Wh.ch Firewall rule components should an administrator configure to block facebook.com use during business hours?