add more detail

_src/android/android-enterprise-faq/what-is-a-work-challenge.md

@@ -15,5 +15,15 @@ eleventyNavigation:
   key: "What is a work challenge?"
   order: 20000
 --- 
-The work challenge is essentially a secondary passcode to access the work profile. In legacy management this would effectively be a container passcode, and is in essence the same thing.
+When a device is deployed as a company owned work profile (COPE) or personally owned work profile (BYOD) device, a secondary profile is created on the device known as a work profile. This is where all corporate apps and data reside on the device, and is fully isolated and separately encrypted on the device. 
 
+Unless explicitly set, the work profile doesn't have any additional authentication required, allowing an end-user to open work applications on the device as desired.
+
+A work challenge is what Google call the passcode applied to the work profile that shares most of the same policies associated with a device passcode policy. It can be applied in the following ways:
+- For devices with no device passcode set, as the only passcode required on the device, and only prompted when work apps are opened.
+- For devices with a passcode set, to share the device passcode between the device and the work profile (when unlocking the device, the work profile also unlocks).
+- For devices with a passcode set, to require a unique passcode for the work profile, requiring additional authentication when work apps are opened.
+
+Here's an example of a work challenge policy requiring a unique passcode on a device:
+
+![Example work challenge policy](/image/Screenshot_2023-05-14_09.12.32.png)