Parks seasonal iPhones issued to summer rangers must leave Workspace ONE automatically when the season ends. Which control should the security administrator configure?
Select an answer to reveal the explanation.
Short Explanation
Think of those ranger phones like library books with a due date—checkout or OG membership lifetime is the stamp that sends them back off the roster. Carbon Black uninstall is an endpoint-sensor control, not MDM offboarding, and an NSX group never unenrolls an iPhone. Kill Hub on Wi-Fi and the device just goes dark; it does not complete a clean lifecycle retire.
Full Explanation
Parks seasonal iPhones issued to summer rangers must leave Workspace ONE automatically when the season ends. Use Workspace ONE UEM staging checkout or organization-group membership lifetime so the iPhones unenroll when the seasonal assignment ends—library books with a due date. Publishing a Carbon Black Cloud uninstall policy that expires the CB Defense sensor on a calendar date fails by concept because CBC uninstall is an endpoint-sensor control, not MDM offboarding from UEM. Creating an NSX-T security group with a TTL so iPhones drop from the distributed firewall after 90 days fails because NSX group TTL never unenrolls an iPhone from Workspace ONE. Disabling Intelligent Hub on the public Wi-Fi SSID so devices cannot check in after Labor Day fails because going dark is not a clean lifecycle retire and may leave enrollment orphaned. Exam caveat: seasonal MDM offboarding uses UEM staging checkout or OG membership lifetime—not CBC calendar uninstall, NSX TTL, or cutting Hub Wi-Fi. Operational check: configure checkout or OG lifetime for seasonal rangers, simulate season end on a test device, confirm unenrollment, and verify CBC/NSX/Wi-Fi tricks were not the offboarding method. Calendar the parks season-end job with HR so lifetime dates match actual return of devices.