MD-102 Protect devices Practice Question
You need to wipe a lost corporate-owned iOS device that is enrolled in Intune. Which action should you perform?
⚠ Common exam trap
Test-takers frequently confuse 'Retire' with 'Wipe', assuming both achieve the same result, but 'Retire' is designed for BYOD scenarios where personal data must be preserved, while 'Wipe' is required for corporate-owned devices that need complete data sanitization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Wipe the device.
The correct action is to wipe the device because a corporate-owned iOS device that is lost requires a full factory reset to remove all data and prevent unauthorized access. In Microsoft Intune, the 'Wipe' action performs a factory reset, returning the device to its out-of-box state and removing all corporate and personal data, which is appropriate for a lost corporate-owned device.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Delete the device from Intune.
Why it's wrong here
Deleting removes the Intune management record and any pending actions, so no wipe command reaches the device; corporate data remains on it. Deletion suits devices being decommissioned from management, not lost hardware needing remote erasure.
- ✗
Retire the device.
Why it's wrong here
Retire removes only corporate data and management profiles, leaving personal apps and content intact, so the lost device remains usable. It suits BYOD departures where personal data must survive. Wiping requires a factory reset, which Retire cannot trigger; that is why it fails here.
- ✓
Wipe the device.
Why this is correct
Wipe performs a full factory reset, removing all data and settings, which suits a lost corporate-owned device where data must not remain accessible. Retire would only remove corporate data, leaving personal content intact, so wipe is the appropriate action.
- ✗
Disable the device.
Why it's wrong here
Disable blocks device access to Intune and stops check-ins, but issues no wipe command, so data persists on the lost hardware. Disable suits temporarily blocking a suspected-compromised device while investigating, not erasing a lost one.
Go deeper
Related to this question
Learn chapter
Managing Conditional Access for Devices
Key term
Wipe
Wipe is the process of securely erasing all data from a storage device, making it unrecoverable and preparing the device for reuse or disposal.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.