MS-900 Describe Microsoft 365 apps and services Practice Question
Your company uses Microsoft 365 Business Premium and wants to enable remote wipe of company data on employees' personal mobile devices if they are lost or stolen. Which service provides this capability?
⚠ Common exam trap
Watch out — candidates often confuse Intune Mobile Device Management (MDM) with Mobile Application Management (MAM), assuming full device wipe is required, but the question specifically asks for selective wipe of company data on personal devices, which is a MAM capability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Intune Mobile Application Management (MAM)
Microsoft Intune Mobile Application Management (MAM) enables selective remote wipe of company data from personal mobile devices without wiping personal data. This is achieved through app-level policies that can remove corporate data from managed apps (e.g., Outlook, Teams) when a device is lost or stolen, using the Intune company portal or a wipe command triggered by an administrator.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Intune Mobile Application Management (MAM)
Why this is correct
Microsoft Intune Mobile Application Management (MAM) is the correct answer because it uses app protection policies that work directly on mobile apps, regardless of device enrollment. These policies enforce data-protection controls such as app-level PIN, encryption, and conditional launch, and critically support selective wipe, which removes only corporate data from an app like Outlook while leaving personal data intact. This makes MAM ideal for BYOD scenarios where employees access company resources from personal devices.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID is an identity and access management service, not a mobile device or application management tool. Its core functions are authentication, single sign-on, and conditional access, which can decide whether a user gets access to resources based on signals like MFA or risk, but it cannot manipulate or selectively wipe corporate data from within an app. While Conditional Access can block access or require compliance, actual data removal from an application is outside the scope of Entra ID.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that delivers visibility into cloud app usage, shadow IT discovery, and session-based controls like data loss prevention and policy enforcement. It can restrict risky behavior or apply classification labels, but it does not natively perform a selective wipe of corporate data from a specific app on a device. Its focus is on monitoring and governing cloud traffic, not managing the lifecycle of app-contained corporate data.
- ✗
Microsoft Purview Compliance Manager
Why it's wrong here
Microsoft Purview Compliance Manager is a compliance management console that helps organizations assess their regulatory posture through pre-built templates, automated risk-based scoring, and audit evidence. It tracks compliance with standards like GDPR and HIPAA but does not have the capability to interact with mobile apps or remove data from them. Selective wiping is an endpoint or application management operation, not a compliance reporting or assessment feature.
Go deeper
Related to this question
Learn chapter
Microsoft Teams
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
App protection policy
An app protection policy is a set of rules that controls how data is handled and secured within mobile applications, ensuring corporate information stays safe even on personal devices.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.