Mobility and Devices Fundamentals — Question 4

Your company uses Windows 10 Work Folders on personal devices. The devices are all registered in Microsoft Intune.
You need to enforce the following security requirements on the personal devices:
"¢ Company data can be removed if an employee is terminated.
"¢ Company data cannot be accessed if a devise is lost or stolen.
What should you do?

Answer options

• A. Enable selective wipe, and enforce a lock screen and password
• B. Enable selective wipe, and secure files transfers with SSL
• C. Enable selective wipe, and enforce encryption
• D. Enforce encryption and enforce a lock screen and password

Correct answer: C

Explanation

The correct answer is C because enabling selective wipe allows for the removal of company data when an employee is terminated, while encryption ensures that the data remains secure and inaccessible if the device is lost or stolen. Options A and D do not incorporate encryption, which is essential for protecting the data in case of theft, and option B focuses on file transfer security, which does not address the need for data removal and protection on the device itself.