You work as a desktop technician at ABC.com. The ABC.com network consists of an Active
Directory Domain Services (AD DS) domain named ABC.com. All servers run Windows Server
2012 and all client computers run Windows 8 Enterprise.
You will use a recently purchased Windows Intune subscription to manage the Windows 8
devices.
Computers in the Research department often contain sensitive information. You want to monitor
file and program activity on computers in the Research department. You add the Research
department computers to a Windows Intune device group named ResearchPCs.
What should you do next?

A.
Apply a Windows Intune Agent Policy that uses the recommended settings.

B.
Apply a Windows Intune Agent Policy that enforces the “Enable real-time protection” setting.

C.
Apply a Windows Intune Agent Policy that enforces the “Scan all downloads” setting.

D.
Apply a Windows Intune Agent Policy that enforces the “Enable Network Inspection System”
setting.