The most granular and appropriate approach to apply work-related policies without affecting personal browsing is to use **managed profiles**. By requiring users to use a specific managed profile for work purposes, administrators can enforce policies only within that profile. Personal browsing in a separate, unmanaged profile will remain unaffected. Option A would apply policies to all browsing, which is not the requirement. Option C relies on bookmarks, which is not a security enforcement mechanism. Option D is generally not feasible as enterprise policies are designed to be enforced, and setting reliable exceptions for personal use within a managed browser is complex and less secure than using separate profiles.

===========