Question
You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.
What should you do?
- A. Onboard the macOS devices to the Microsoft Purview compliance portal.
- B. From the Microsoft Intune admin center, create a security baseline.
- C. Install Defender for Endpoint on the macOS devices. Correct
- D. From the Microsoft Intune admin center, create a configuration profile.
Explanation
Intune antivirus policies for macOS manage the settings of Microsoft Defender for Endpoint on Mac, and the documented prerequisite is that Defender for Endpoint must be installed on the device for Intune to manage its antivirus settings. Creating a configuration profile alone does not provide an antivirus engine to configure; the macOS Antivirus profile in Endpoint security actually replaces the need for configuration profiles or .plist files. Security baselines do not target macOS antivirus, and onboarding to the Purview compliance portal is for data loss prevention, not antivirus.
