A corporation with a BYOD policy is very concerned about issues that may arise from data ownership. The corporation is investigating a new MDM solution and has gathered the following requirements as…

Application-based containerization isolates corporate apps and data into a separate, managed partition on the personal device. This enables MDM administrators to remotely wipe only the corporate container from a central console without touching personal data, directly satisfying the requirement to delete all corporate applications and local data centrally.

Full-device encryption protects data at rest from unauthorized physical access but does not address the requirements for remote selective deletion, travel-based access restriction, or OS update enforcement.

Geofencing applies location-aware conditional access policies that automatically restrict or block access to corporate resources when a device is detected outside a defined geographic boundary. This directly meets the requirement to restrict corporate data access during international travel by triggering enforcement automatically when the device crosses the geographic policy threshold.

Application allow listing controls which applications are permitted to execute on the device but does not provide containerization, geofencing, or any mechanism to meet the four stated MDM requirements.

A biometric unlock requirement is an authentication control that secures device access but does not satisfy any of the four requirements related to data deletion, international travel restrictions, or OS update compliance.

Over-the-air update restriction limits the ability to receive or push OS updates remotely, which directly contradicts the requirement that devices must be on the latest OS version within three weeks of a new OS release.