Exam MD-101 topic 4 question 60 discussion

HOTSPOT -
You have a Microsoft 365 tenant and an internal certification authority (CA).
You need to use Microsoft Intune to deploy the root CA certificate to managed devices.
Which type of Intune policy and profile should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Suggested Answer:
Box 1: Configuration profile -
Create a trusted certificate profile.

Box 2: Trusted certificate -
When using Intune to provision devices with certificates to access your corporate resources and network, use a trusted certificate profile to deploy the trusted root certificate to those devices. Trusted root certificates establish a trust from the device to your root or intermediate (issuing) CA from which the other certificates are issued.
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/certificates-trusted-root