You have an Azure AD group named Group1 that contains two Windows 10 Enterprise devices, Device1 and Device2. You assigned a device configuration profile named Profile1 to Group1. You need Profile1 to apply only to Device1. Which part of Profile1 should you change?

The correct answer is Assignments. To apply a profile to only a subset of devices within an assigned group, you would modify the Assignments of the profile. This allows you to include or exclude specific groups or devices. Settings define the actual configurations within the profile (e.g., password policies, device restrictions), not which devices receive them. Scope (Tags) are used for organizing devices or profiles and can be used with filters, but directly changing a tag on the profile itself won't filter its application within an assigned group. Applicability Rules (also known as Filter Mode or Filters) are used to dynamically include or exclude devices based on specific properties, but the question asks what part of the profile to change, and Assignments is the direct control for targeting.