Your Intune tenant (contoso.com) accepts sign-ins using us.contoso.com, eu.contoso.com, or contoso.com. To avoid asking users for the MDM enrollment URL during enrollment and minimize changes, which DNS records should you create?

The correct answer is "Three CNAME records" because Intune relies on CNAME records to automatically redirect enrollment requests to the correct MDM enrollment URL (enterpriseenrollment.manage.microsoft.com). By creating a CNAME record for each accepted sign-in domain (us.contoso.com, eu.contoso.com, and contoso.com) that points to enterpriseenrollment.manage.microsoft.com, you ensure that users are not prompted for the MDM enrollment URL during enrollment, streamlining the process. "One TXT record only" and "Three TXT records" are incorrect because TXT records are used for email authentication (like SPF or DKIM) or domain verification, not for redirecting MDM enrollment traffic. "One CNAME record only" is incorrect because you have three distinct domains that users sign in with, and each requires its own CNAME record to ensure automatic enrollment for all users across those domains.