A helpdesk technician receives a call from an employee whose company iPhone was stolen at a coffee shop 20 minutes ago. The device has a 6-digit PIN and Touch ID. What is the correct sequence of immediate response steps?
- A.Wait a full day to see whether the handset turns up, and then issue a remote wipe if the employee has not recovered it from the shop where they left it, and log the incident afterward with the security team, and the police report filed
- B.Issue a remote wipe straight away, then report the loss to the security team, and file a police report the same afternoon
- C.Enable Lost Mode via Apple Business Manager/MDM immediately to lock the device and display a contact message, then report to IT security, then remotely wipe if the device contains highly sensitive data and recovery is unlikely
- D.Change the employee's account password, and revoke each trusted device attached to it before anything else
Why C is correct