Selective Wipe for Stolen Android Enterprise Devices
Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to ensure that corporate data on a device is wiped if the device is reported stolen. Which action should you configure?
Quick Answer
The answer is a selective wipe from the Intune console. This is correct because a selective wipe on an Android Enterprise device targets only the work profile and managed apps, removing corporate data while leaving the user’s personal apps, photos, and settings intact. For a stolen device, this ensures sensitive company information is protected without overstepping into personal privacy, which is a core requirement for BYOD scenarios. On the MD-102 exam, this concept tests your understanding of the difference between a selective wipe and a full factory reset—a common trap where candidates mistakenly choose the latter, which would erase everything. Remember that Android Enterprise work profiles are sandboxed, so Intune can surgically remove only that container. A quick memory tip: think “selective = surgical strike on the work profile,” versus “full wipe = scorched earth on the whole device.”
⚠ Common exam trap
A common mix-up: candidates confuse 'full wipe' with 'selective wipe' in Android Enterprise, mistakenly thinking a full wipe is required for stolen devices, but Microsoft Intune's selective wipe is the correct and recommended action for corporate data removal while preserving personal data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Selective wipe from the Intune console.
A selective wipe on an Android Enterprise device removes only corporate data (managed apps, work profile, and policies) while preserving the user's personal data. This is the appropriate action when a device is reported stolen, as it ensures corporate data is protected without affecting the user's personal information, which aligns with the organization's data protection requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Full wipe from the Intune console.
Why it's wrong here
Full wipe removes personal data as well.
- ✓
Selective wipe from the Intune console.
Why this is correct
Selective wipe removes corporate data only.
- ✗
Delete the device from Microsoft Entra ID.
Why it's wrong here
Deleting does not wipe data.
- ✗
Retire the device from Intune.
Why it's wrong here
Retire may not wipe corporate data on Android Enterprise.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Wipe
Wipe is the process of securely erasing all data from a storage device, making it unrecoverable and preparing the device for reuse or disposal.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to ensure that when a device is lost, an IT admin can remotely wipe only the work profile, leaving the personal data intact. Which remote action should you use?
easy- A.Wipe
- ✓ B.Remove work profile
- C.Retire
- D.Delete
Why B: The 'Remove work profile' action is the correct remote action for Android Enterprise personally-owned work profile devices because it specifically targets and removes only the managed work profile, including all corporate apps and data, while leaving the user's personal profile and data intact. This action is designed for BYOD scenarios where the organization needs to protect corporate data without affecting the employee's personal information.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.