Your network contains an Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).
Existing on-premises computers are managed by using Microsoft System Center Configuration Manager (Current Branch). You configure contoso.com for co-management.
You deploy 100 new devices that run Windows 10. The devices are joined to Azure AD and enrolled in Microsoft Intune.
You need to ensure that the devices are co-managed.
What should you create in Intune first?
A . a conditional access policy
B . a device compliance policy
C . an app for the Configuration Manager client
D . a device configuration profile
E . an app configuration policy
Answer: C
Explanation:
For new internet-based devices, you need to create an app in Intune. Deploy this app to Windows 10 devices that aren’t already Configuration Manager clients. This scenario is when you have new Windows 10 devices that join Azure AD and automatically enroll to Intune. You install the Configuration Manager client to reach a co-management state.
References: https://docs.microsoft.com/en-us/configmgr/comanage/how-to-prepare-win10