MD-102 Manage and maintain devices Practice Question
You manage Windows 10 devices with Microsoft Intune. You need to ensure that when a user reports a lost device, you can remotely lock it and display a custom message on the lock screen. The solution must not erase any data. What should you do?
⚠ Common exam trap
The trap here is assuming that selective wipe or Fresh Start can lock a device or display a message, when they are data removal or refresh tools.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the Remote lock action and configure a custom lock screen message.
To remotely lock a lost Windows device and display a custom message without erasing data, use the Remote lock action in Intune. Additionally, configure a custom lock screen message through a device configuration profile. This secures the device and provides contact information, all without data loss.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the Fresh Start action.
Why it's wrong here
Fresh Start reinstalls Windows and removes pre-installed apps, but it does not lock the device or display a custom message. It is intended to refresh a device while preserving user data, but it is not a remote lock solution and would not help with a lost device scenario.
- ✗
Perform a full wipe.
Why it's wrong here
A full wipe erases all data and resets the device to factory settings. This does not meet the requirement to not erase data and does not allow displaying a custom message. It is used when data must be protected at all costs, but here the goal is to lock and message without data loss.
- ✓
Use the Remote lock action and configure a custom lock screen message.
Why this is correct
The Remote lock action in Intune allows you to lock a device remotely. For Windows devices, you can also configure a custom lock screen message via a device configuration profile. This combination locks the device and displays a message without erasing data, meeting all requirements.
- ✗
Perform a selective wipe.
Why it's wrong here
Selective wipe removes corporate data from the device but does not lock it or display a custom message. It is used to remove company data when a device is lost or stolen, but it does not provide the ability to remotely lock or show a message. It also erases data, which is not allowed.
Go deeper
Related to this question
Learn chapter
Implementing Windows Autopilot
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Remote lock
Remote lock is a security feature that allows an administrator to lock a device from a remote location, preventing unauthorized access if the device is lost or stolen.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.