Which two actions should you perform?

Employees are permitted to bring personally owned portable Windows 10 Enterprise computers to the office.
They are permitted to install corporate applications by using the management infrastructure agent and access
corporate email by using the Mail app.
An employee’s personally owned portable computer is stolen.
You need to protect the corporate applications and email messages on the computer.
Which two actions should you perform? Each correct answer presents part of the solution.

A.
Prevent the computer from connecting to the corporate wireless network.

B.
Change the user’s password.

C.
Disconnect the computer from the management infrastructure.

D.
Initiate a remote wipe.

Explanation:
The personally owned portable Windows 10 Enterprise computers being managed by the management
infrastructure agent enables the use of remote wipe. By initiating a remote wipe, we can erase all company data
including email from the stolen device.
Microsoft Intune provides selective wipe, full wipe, remote lock, and passcode reset capabilities. Because
mobile devices can store sensitive corporate data and provide access to many corporate resources, you can
issue a remote device wipe command from the Microsoft Intune administrator console to wipe a lost or stolen
device.
Changing the user’s password should be the first step. If the stolen computer is accessed before the remote
wipe happens, the malicious user could be able to access company resources if the laptop has saved
passwords.
Incorrect Answers:
A: Preventing the computer from connecting to the corporate wireless network will not offer much protection.
The person in possession of the laptop would still be able to access all the data on the laptop and download
emails. Furthermore, it is likely that the corporate applications can access corporate servers over any Internet
connection.
C: Disconnecting the computer from the management infrastructure will not help. The person in possession of
the laptop would still be able to access all the data on the laptop and download emails. This step would also
remove the ability to perform a remote wipe. The computer will be disconnected from the management
infrastructure when the remote wipe happens.

https://technet.microsoft.com/en-gb/library/jj676679.aspx