ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  No doubt B is the only correct Answer here: Central management changes is the Key here, Whether you use Microsoft Intune with App Protection Policies (MAM-only for pure BYOD) or full MDM enrollment, the organization gains the ability to: Trigger a selective wipe that removes only the work container, managed apps, and corporate data while leaving personal photos and messages untouched. Force a device lock or full wipe if policy allows and consent was obtained. Immediately revoke tokens and Conditional Access sessions so the lost device can no longer reach Entra ID, Exchange, SharePoint, or any other resource. Enforce encryption at rest so that even if wipe fails, the data remains unreadable without the keys held by the management service.

• Chose B2

  It's a tricky thing with BYOD, but you must be capable of remote wiping a device if it is "lost" because it's not a company device. This trade off becomes complicated in terms of liability and wiping someone's personal info from their device. What if a rogue IT person maliciously wipes a device? For those advocating for A - locating a device tells you where it is, but it doesn't secure the data on it. The data remains vulnerable until further action is taken. Hence, enterprise data security take priority over personal data loss.

• 2

  B is right because locating the device is not as important as ability to manage it remotely when it is lost.