You have a Microsoft 365 E5 subscription with 500 macOS devices enrolled in Microsoft Intune. You must apply Microsoft Defender for Endpoint antivirus policies to those macOS devices while minimizing administrative effort. What should you do?

Creating a configuration profile in the Microsoft Intune admin center is the correct approach because Intune is designed to manage device settings and deploy policies, including antivirus policies for Defender for Endpoint, across enrolled devices like macOS. This method centralizes management and minimizes administrative effort. Onboarding devices to the Microsoft Purview compliance portal is for data governance and compliance, not for deploying antivirus policies. Creating a security baseline in Intune is for Windows devices, not macOS. While installing Defender for Endpoint on macOS devices is necessary, it's a prerequisite, not the method for applying antivirus policies; those policies are pushed via Intune.