An Intune compliance policy is designed to evaluate a device's state against a predefined set of rules (e.g., requiring disk encryption, a minimum OS version, or an active antivirus). Its primary function is to report on the device's compliance status and integrate with Azure AD Conditional Access to allow or block access to corporate resources. It does not, however, actively push or enforce specific application settings, such as configuring security features within the Microsoft Edge browser. The correct Intune feature for this task is a device configuration profile, specifically using the Settings Catalog or Administrative Templates (ADMX) for Microsoft Edge.

A. Yes: This is incorrect. A compliance policy assesses a device's state but does not configure application-level settings. A device configuration profile is required to deploy specific settings to an application like Microsoft Edge.

1. Microsoft Learn

Intune Documentation

"Use compliance policies to set rules for devices you manage with Intune."

Reference: Under the "How compliance policies work" section

it states

"Device compliance policies are a key feature when using Intune to protect your organization's resources. In Intune

you can create rules and settings that devices must meet to be considered compliant... When a device is compliant

that device is given access to your organization's resources." This highlights its role in assessment and access control

not direct configuration of app settings.

2. Microsoft Learn

Intune Documentation

"Add Microsoft Edge policy settings to Microsoft Intune."

Reference: The introductory paragraph states

"You can use Microsoft Intune to configure Microsoft Edge policy settings. This article shows you how to configure Microsoft Edge policy settings by using either the Settings Catalog or Administrative Templates." This explicitly identifies the correct tools for the task described in the question.

3. Microsoft Learn

Intune Documentation

"What are Microsoft Intune device profiles?"

Reference: The overview section states

"Microsoft Intune includes settings and features you can enable or disable on different devices within your organization. These settings and features are added to 'configuration profiles.' You can create profiles for different devices and different platforms... When the profile is ready

you can then deploy the profile to user and device groups in your organization." This confirms that configuration profiles are the mechanism for deploying settings.