MD-102 Manage and maintain devices Practice Question
You are the endpoint administrator for a company that uses Microsoft Intune. You need to ensure that when a Windows 11 device is retired or wiped, the device record is automatically removed from Intune after 30 days. Which action should you take?
⚠ Common exam trap
Many candidates confuse compliance or group membership with actual device record deletion; only the device cleanup rule removes stale records from Intune.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a device cleanup rule in the Intune tenant settings.
The device cleanup rule in Intune tenant settings automatically deletes devices that have not checked in for a specified number of days. Setting it to 30 days removes records for retired or wiped devices that no longer communicate. Dynamic groups, compliance policies, and Entra ID retention policies do not delete Intune device records, so they cannot fulfill this requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a device cleanup rule in the Intune tenant settings.
Why this is correct
Intune includes a device cleanup rule under Tenant administration > Device cleanup rules. You can set devices to be automatically deleted after a specified number of days since last check-in. Setting it to 30 days ensures stale records are removed. This directly meets the requirement without manual intervention.
- ✗
Assign a compliance policy that marks devices as noncompliant after 30 days.
Why it's wrong here
A compliance policy can flag a device as noncompliant if it fails to check in, but it does not delete the device record. Noncompliance may trigger conditional access blocks, but the device remains in Intune. Since the requirement is automatic removal, this approach does not satisfy it.
- ✗
Create a dynamic device group based on the enrollment date.
Why it's wrong here
Dynamic groups based on enrollment date can help target devices, but they do not delete device records. Group membership does not remove devices from Intune; it only affects policy and app assignment. This does not achieve automatic removal after 30 days, so it is not the correct action.
- ✗
Enable automatic enrollment for all users and set a retention policy in Microsoft Entra ID.
Why it's wrong here
Microsoft Entra ID retention policies apply to directory objects like users or groups, not to Intune device records. Automatic enrollment ensures devices enroll, but it does not delete them after 30 days. This combination does not provide the automatic cleanup of stale Intune device records required.
Go deeper
Related to this question
Learn chapter
Deploying Applications with Intune
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.