Computer1 (Windows 10) is enrolled in Intune and must be set up as a public kiosk device that runs a single full-screen customer-facing app. Which configuration profile template should you use in the Intune admin center?

The Kiosk device restriction profile template is specifically designed for configuring devices to operate in a dedicated, single-purpose mode, such as a public kiosk. It allows administrators to specify a single application to run in full-screen mode, restrict access to other device functions, and prevent users from exiting the application. This directly addresses the requirement for a single full-screen customer-facing app on Computer1. Shared multi-user device is for devices used by multiple users, not for single-app kiosk mode. Device restrictions is a broader category that contains many settings, but the Kiosk template is a specialized, pre-configured option for this exact scenario. Endpoint protection focuses on security settings like antivirus and firewall, not kiosk mode configuration.