You plan to implement Microsoft Cloud PKI to deploy personal user certificates to all Windows devices using Microsoft Intune. What is the minimum number of configuration profiles required to support this deployment?

To deploy personal user certificates using Microsoft Cloud PKI and Intune, three distinct configuration profiles are required. First, a "Cloud PKI" profile is needed to define the certificate authority (CA) and its properties within Cloud PKI. Second, a "Trusted certificate" profile is necessary to deploy the root certificate of the Cloud PKI CA to the Windows devices, establishing trust. Third, a "SCEP certificate" profile is used to request and deploy the personal user certificates from the Cloud PKI CA to the devices. One profile is insufficient as it cannot encompass all three distinct functions. Two profiles would also be insufficient, as you cannot combine two of these distinct functions into a single profile. Four profiles are not necessary, as the three listed profiles cover all requirements.