In Android Network Settings, find Private DNS Server option, and input "dns.adguard.com" without the " " into it. Make sure the dot is ticked for "dns.adguard.com" line, not for Disabled or Automatic line. You can use "dns.adguard-dns.com" as well. They both link to secure AdGuard DNS servers.
If you use a good browser, like Bromite, then you can find Secure DNS options there and input https://220.127.116.11/dns-querty , but that affects only Bromite browsing, not other apps, not WhatsApp.
if you use a VPN app that allows you to input your own DNS server settings, then input: "18.104.22.168" and/or "22.214.171.124" in VPN app settings.
AdGuard DNS servers filter out Google Analytics domains, as well as, some other WhatsApp tracking domains, such as dit.whatsapp.net (a domain for De-Identified WhatsApp Telementry). Blocking those domains doesn't prevent government from tracking you over WhatsApp... WhatsApp is a subject of live tracking by authorities via "Issuance of an order for a pen register or a trap and trace device". Not even a VPN can help you when whichever service itself spies on you... Stick to Signal.