Pass Your Microsoft MD-102 Exam Easy!

Sync prompts the device to check for new management policies. That suits prompt MDM policy receipt, whereas this device needs lost corporate device eradication.

Restart reboots the device without intentionally removing management data. The choice addresses controlled remote reboot rather than lost corporate device eradication.

Retire removes managed corporate content according to supported platform ownership rules. It solves privacy-conscious offboarding; the actual goal is lost corporate device eradication.

Recovery-key rotation invalidates an exposed BitLocker recovery protector. It solves protected recovery-key replacement; the actual goal is authorized device recovery access.

Password rotation eliminates reuse of a disclosed local privileged secret. Its role is new emergency local admin credential; this case requires authorized device recovery access.

Status reporting provides evidence of encryption rather than changing keys. This is appropriate for non-destructive BitLocker audit, not the specified authorized device recovery access.

Version reporting confirms whether the intended updates reached devices. The choice addresses verifiable signature rollout rather than restored malware update source.

Signature updates refresh threat definitions without reprovisioning the device. This is appropriate for current malware definitions, not the specified restored malware update source.

EDR incident handling covers threat triage beyond signature refresh. That suits endpoint threat investigation, whereas this device needs restored malware update source.

Targeted destructive actions minimize unintended asset damage. It solves single-asset destructive action; the actual goal is accountable mass-action outcome.

Software assignments distribute applications using normal MDM policy delivery. Its role is fleet app deployment without reset; this case requires accountable mass-action outcome.

Bulk operations execute an approved action across an explicit device set. The choice addresses efficient cohort-wide sync rather than accountable mass-action outcome.

Device query retrieves eligible endpoint state through Intune's query interface. Its role is live remote device inventory; this case requires user-scoped policy diagnostics.

Diagnostic bundles provide detailed client configuration and enrollment evidence. This is appropriate for endpoint log evidence collection, not the specified user-scoped policy diagnostics.

Security-hunting data answers different questions from Intune device-query inventory. That suits cross-endpoint security telemetry investigation, whereas this device needs user-scoped policy diagnostics.

Runtime query retrieves eligible local device facts. That suits live Windows service evidence, whereas this device needs consolidated user device support.

Log collection preserves detailed error traces beyond live inventory. The choice addresses historical endpoint debug logs rather than consolidated user device support.

EDR hunting covers time-series threat data beyond immediate Intune inventory. It solves multi-week security signal search; the actual goal is consolidated user device support.

Management sync requests updated policy delivery without a factory reset. This is appropriate for refreshed MDM policy application, not the specified safe update reboot.

Retire removes eligible corporate management and data while respecting personal ownership. It solves selective company data removal; the actual goal is safe update reboot.

Wipe performs a destructive device reset according to supported platform capabilities. Its role is stolen corporate tablet containment; this case requires safe update reboot.

Exposed recovery secrets should be replaced without disabling encryption. That suits revoked disclosed encryption protector, whereas this device needs current endpoint threat definitions.

Replacing the local secret prevents former staff reuse. The choice addresses ended-contractor local password cleanup rather than current endpoint threat definitions.

Remote wipe initiates device-data removal when supported and reachable. This is appropriate for approved lost-device erase, not the specified current endpoint threat definitions.

Remote commands need client contact; pending status does not prove execution. The choice addresses reliable offline-device command diagnosis rather than lawful remote action entitlement.

Command acceptance differs from confirmed destructive execution. It solves truthful wipe execution state; the actual goal is lawful remote action entitlement.

Rotation requires supported active recovery protectors. Its role is supported encryption key rotation; this case requires lawful remote action entitlement.

Bulk action scope can limit operations to an approved cohort. Its role is safe scheduled mass restart; this case requires bulk command accountability.

Device identity confirmation prevents damaging unrelated phones. This is appropriate for audited stolen asset wipe, not the specified bulk command accountability.

Configuration assignment is the right path for persistent profile rollout. That suits managed Wi-Fi deployment at scale, whereas this device needs bulk command accountability.

Device query yields current local facts for eligible endpoints. It solves on-demand endpoint fact query; the actual goal is tenant EDR correlation.

Troubleshooting correlates user, apps and assigned device policy. That suits contextual app-assignment support, whereas this device needs tenant EDR correlation.

Client logs expose low-level MDM failures not fully shown in summary reports. The choice addresses technical enrollment log capture rather than tenant EDR correlation.