Hi there,
Yes you will receive the machine with Windows 11 or you can make a free upgrade.
Device Guard and Credential Guard are the new security features that are only available on Windows 10 Enterprise today. Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications.
I hope this information helps. If you have any questions please let me know and I will be glad to help you out.
------------------------------------------------------------------------------------------------------------------------------------------
--If the reply is helpful, please Upvote and Accept it as an answer--