Certified Ethical Hacker (CEH) Practice Question

The requirement is to remove only enterprise resources that the MDM originally provisioned-mail profiles, security certificates, managed applications, and any associated containerized data-without touching user-owned content. This is exactly what a selective wipe (also called an enterprise or corporate wipe) does: it unenrolls the device, deletes managed data, and leaves personal data intact. A full factory reset would erase all content, violating the policy. Geofence lock only restricts access based on location and does not delete data. A remote lock with a PIN change secures the device but likewise leaves both corporate and personal data untouched, failing to satisfy the "remove corporate data" portion of the policy.