You manage iOS devices with Microsoft Intune and have a compliance policy that blocks jailbroken devices. To turn on Enhanced jailbreak detection, which item should you configure?

The correct answer is the device compliance policy. Enhanced jailbreak detection is a setting within the device compliance policy for iOS/iPadOS devices. By configuring this setting, Intune can leverage Microsoft Defender for Endpoint's threat intelligence to identify jailbroken devices more effectively than basic detection methods. Incorrect options: The Compliance policy settings: This is too broad; while related to compliance, Enhanced jailbreak detection is a specific setting within a device compliance policy, not a standalone policy setting. A network location: Network locations are used for Conditional Access policies to define trusted or untrusted network access, not for device jailbreak detection. A configuration profile: Configuration profiles are used to deploy settings, features, or restrictions to devices (e.g., Wi-Fi settings, passcode requirements), but jailbreak detection capabilities are managed through compliance policies.