Exam MD-102 topic 1 question 15 discussion

The clue in this question is: You need to remove Device1 from Intune immediately So basically the only option that is left is 'delete' as this instantly removes the device from intune and only removes company data. ref: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center

I choose b read closely You need to remove Device1 from Intune immediately. “”The solution must ensure that if the device checks in again, any apps and data provisioned by Intune are removed. User-installed apps, personal data, and OEM-installed apps must be retained.”” When the device checks in again, then it needs to be removed

A Delete Action * remove Device 1 immediately

Delete does not remove corporate data from device, only deletes device from Intune. Correct option is B - Retire.

It is delete action the one that removes inmediatly the device from the console and also acts as a retire action, based on MS documentation: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center

B. a Retire action Explanation: The Retire action in Microsoft Intune removes Intune-provisioned apps, settings, and data from the device while keeping user-installed apps, personal data, and OEM-installed apps. This is the recommended action when you want to remove management from a device but retain personal content, which aligns with your requirement. - Delete would only remove the device from Intune without affecting the device itself, so if the device checks in again, the settings would still remain. - Fresh Start removes most apps, settings, and personal files. - Autopilot Reset resets the device to a business-ready state but does not retain user-installed apps and personal data as required.

Answer B: "Delete Action Purpose: The Delete action permanently removes the device from Intune management. Outcome: If a device is deleted, it is immediately removed from the Intune portal, and any future check-ins will no longer apply. However, unlike Retire, if the device was managing apps and configurations, the user-installed apps and personal data may still remain on the device, but there won't be any mechanism for Intune to manage or remove those upon future check-ins."

it is b. Retire action removes the corporate data but keeps the personal one, and this is the request.Delete does not remove anything

From Microsoft Learn: The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. As the question states "immediately", the answer is A)Delete Source: https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#delete-devices-from-the-intune-admin-center

B for retire

The answer is B Because it said "User-installed apps, personal data, and OEM-installed apps must be retained." Otherwise, it would've been A.

Retire Action: Purpose: This action removes company data from the device while keeping the user’s personal data and apps intact. It's commonly used when a device is no longer needed for corporate use, but the device owner should retain their personal files and apps. Delete Action: Purpose: The Delete action removes the device from Intune’s management console, but it does not affect the device itself. This means no data or configurations are removed from the device—it simply stops showing up in Intune’s list of managed devices.

The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune. The device is removed from Intune management. Removal happens the next time the device checks in and receives the remote Retire action. The device still shows up in Intune until the device checks in. If you want to remove stale devices immediately, use the Delete action instead. https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe

Using the RETIRE option: Immediate Removal: It removes the device from Intune management immediately. Provisioned Data: Ensures that if the device checks in again, any Intune-provisioned apps and data will be removed. Retention of Personal and OEM Content: User-installed apps, personal data, and OEM-installed apps are retained, meeting the need to keep these elements. For this scenario, where you want to ensure that managed apps and data are removed if the device checks in again, but personal data and user-installed apps are retained, the Retire action is the appropriate choice.

Answer: B. a Retire action: This is the correct choice as it removes Intune-managed data and settings while keeping user-installed apps and personal data intact.

Correct Answer is B, To remove Device1 from Intune while retaining user-installed apps, personal data, and OEM-installed apps, you should use the Retire action. This action allows you to remove devices from Intune that are no longer needed or are missing, while preserving the specified data and applications

So I had a chat with ChatGPT on this and it clarified something for me. When you delete a device in Intune, it immediately removes any trace that the device was in Intune. In this scenario, we want to ensure the company data is removed if the device comes back online. If we were to delete the device, we would not be able to ensure that the data gets removed since it is no longer in Intune. This is what makes retiring the correct answer in my opinion.