Exam MS-102 topic 1 question 318 discussion

Answer is Download an onboarding package.

To onboard corporate-owned iOS devices to Microsoft Defender for Endpoint when you're using Microsoft Intune, you need to follow these steps: Download an onboarding package from the Microsoft Defender for Endpoint portal. This package will provide the necessary configuration files or apps that enable Defender for Endpoint to be deployed and activated on the devices. Install the onboarding package on the iOS devices, which could involve pushing the configuration through Intune, so Defender for Endpoint can start protecting the devices.

Download an onboarding package is used for Windows/macOS onboarding but not for iOS.

It's worded oddly, but it is correct. By "an app" they mean the "iOS store app" In the Microsoft Intune admin center, go to Apps > iOS/iPadOS > Add > iOS store app and click Select.

https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-endpoint-ios Deployment of Microsoft Defender for Endpoint on iOS can be done via Microsoft Intune and both supervised and unsupervised devices are supported

D is correct. For Administrators Access to the Microsoft Defender portal. Access to the Microsoft Intune admin center, to: Deploy the app to enrolled user groups in your organization.

A. Download an onboarding package. Explanation: Onboarding Package: For Defender for Endpoint, an onboarding package must be downloaded and deployed to the devices. This package typically includes the necessary scripts or configurations that enable the integration of Defender for Endpoint with your managed devices through Intune​. Additional Steps: After downloading the onboarding package, you would deploy it to the iOS devices managed by Intune. This process helps ensure that these devices are properly registered with Defender for Endpoint and start receiving the necessary protection policies.