You need to ensure that file and program activity is always monitored on this computer

You administer a company network that includes computers that run Windows 8 Enterprise in an Active
Directory domain. The company has purchased a subscription to Windows Intune.
Corporate security policy requires that computers in the accounting department have file and program activity
logged. A user in the accounting department uses a computer that is managed by Windows Intune.
You need to ensure that file and program activity is always monitored on this computer.
What should you do?

A.
Create a new Windows Firewall Setting policy in the Windows Intune Admin Console.

B.
Create a new Windows Intune Mobile Security policy in the Windows Intune Admin Console.

C.
Create and deploy a custom policy in the Windows Intune Center Settings template.

D.
In the Windows Intune Admin Console, create a new Windows Intune Agent Settings policy that uses the
recommended settings.

Explanation:
Configure Your Windows Intune Environment

http://technet.microsoft.com/en-us/library/hh441722.aspx
To set up the default Windows Intune Policies:
1. Open the Windows Intune administrator console.
2. In the workspace shortcuts pane, click the Policyicon.
3. Under Tasks, click Add Policy.
4. In the Create a New Policy dialog box, the following policy templates are displayed in the list of templates in
the left pane:
Mobile Device Security Policy
Windows Firewall Settings
Windows Intune Agent Settings
Windows Intune Center Settings