You need to ensure that you can manage the personal iOS devices

Your network contains an Active Directory domain named contoso.com. Contoso.com is
synchronized to a Microsoft Azure Active Directory. You have a Microsoft Intune subscription.
Your company plans to implement a Bring Your Own Device (BYOD) policy.
You will provide users with access to corporate data from their personal iOS devices.

You need to ensure that you can manage the personal iOS devices.
What should you do first?

A.
Install the Company Portal app from the Apple App Store.

B.
Create a device enrollment manager account.

C.
Set a DNS alias for the enrollment server address.

D.
Configure the Intune Service to Service Connector for Hosted Exchange.

E.
Enroll for an Apple Push Notification (APN) certificate.