Device1 (Windows 10) is joined to Active Directory and enrolled in Intune. It's managed by both Group Policy and Intune. To ensure Intune settings take precedence over Group Policy, what should you configure?

A device configuration profile is the correct choice because it allows you to deploy settings that directly manage and configure device features, including those that might conflict with Group Policy. When a Windows 10 device is co-managed by both Group Policy and Intune, Intune-deployed settings (like those in a configuration profile) are designed to take precedence over conflicting Group Policy settings by default, especially when using modern management features. A device compliance policy defines conditions a device must meet to be considered compliant, but doesn't directly configure settings to override GPOs. An MDM Security Baseline profile applies a pre-configured set of security settings, which is a type of device configuration, but a general device configuration profile offers broader applicability for overriding GPOs. A Group Policy Object (GPO) is a traditional Active Directory management tool and would not be used to make Intune settings take precedence over itself.