Microsoft Endpoint Administrator — Question 272

You have a Microsoft 365 subscription and use Microsoft Intune Suite.

You plan to use Microsoft Cloud PKI to support the signing and encryption of email messages.

What should you do first?

Answer options

• A. Create a root certification authority (CA).
• B. Create a device compliance policy.
• C. Create device configuration SCEP certificate profiles.
• D. Create device configuration trusted certificate profiles.
• E. Create an issuing certification authority (CA).

Correct answer: A

Explanation

The correct first step is to create a root certification authority (CA) as it serves as the foundation for the PKI, allowing for the issuance of certificates. Other options, such as creating compliance policies or SCEP profiles, come into play after establishing the root CA, as they depend on the CA for certificate management.