220-1101 Question 43
Single answerMobile device management (MDM)A company issues tablets to field technicians and manages them through a mobile device management (MDM) platform. A technician reports that their company tablet was left in a taxi and likely stolen. The tablet contains cached customer information, and management wants to protect company data immediately while keeping the option to recover the device later if it is found. Which action should the technician recommend FIRST in the MDM console?
- A
Initiate a remote lock and mark the device as lost
- B
Perform a full factory reset of the tablet immediately
- C
Remove the device from the MDM inventory
- D
Disable Bluetooth on all company tablets
Show answer and explanation
Correct answer: A
Explanation
The best first step is to use the MDM platform to remotely lock the missing tablet and place it in lost mode, if supported. This aligns with common mobile security best practices: secure the device immediately, preserve administrative control, and avoid unnecessary destruction of data until recovery options are assessed. If the device is later confirmed stolen or unrecoverable, the organization can escalate to a selective wipe or full wipe according to policy. Vendor documentation from major platform providers and MDM vendors commonly recommends using remote lock or lost mode first for missing-but-possibly-recoverable devices, followed by location tracking and then remote wipe if needed. For A+ Core 1, candidates should recognize that MDM tools are used to enforce security controls such as screen locks, device tracking, and remote wipe, and that choosing the least destructive effective action first is often the most practical response.
- A. Correct.
Correct. A remote lock combined with lost mode or a similar MDM device lock action is the best first response when a managed device is missing but may still be recovered. This helps prevent unauthorized access right away while preserving the possibility of locating or recovering the tablet later. In many MDM platforms, lost mode can also help track or display contact information on the device.
- B. Incorrect.
Incorrect. A full factory reset or remote wipe may be appropriate if recovery is unlikely or if policy requires immediate destruction of local data, but it is not the best FIRST action in this scenario because management specifically wants to protect data immediately while still keeping open the option to recover the device. Wiping too early removes that recovery opportunity and may also eliminate tracking or other post-loss management features, depending on platform and state.
- C. Incorrect.
Incorrect. Removing the device from MDM inventory would typically reduce administrative control rather than improve it. If the device is no longer enrolled or managed, the organization may lose the ability to send lock, locate, or wipe commands. Someone might choose this option thinking it blocks access, but it usually does the opposite from a management perspective.
- D. Incorrect.
Incorrect. Disabling Bluetooth on all company tablets does not address the immediate risk from the missing device. This is a broad configuration change unrelated to securing the specific lost tablet. It may sound security-focused, but it does not protect the cached customer data already present on the missing device.