What does MDM stand for?
MDM stands for Mobile Device Management. Tools that enrol, configure and secure mobile devices centrally, for example by enforcing a screen lock, encryption and remote wipe.
MDM is the software an organization uses to enrol phones, tablets and laptops and manage them from one console. Once a device is enrolled, the administrator can require a screen lock and encryption, push Wi-Fi and email settings, install or block applications, check the operating system version and wipe the device if it is lost. Enrolment is what gives the organization that control, so the first question in any scenario is whether the device is enrolled.
MDM in practice: an example
A sales representative leaves a company phone in a taxi. The administrator opens the MDM console, sees the phone was last online ten minutes ago, sends a remote lock and then a wipe command. Because the policy required encryption and a six-digit passcode, the data was protected even before the wipe arrived.
What MDM is confused with
MDM vs MAM: what is the difference?
Mobile application management controls only the work applications and their data. MDM controls the whole device. On a personal phone, MAM is often the less intrusive choice.
MDM vs BYOD: what is the difference?
BYOD is a policy about who owns the device. MDM is a tool that can enforce rules on a device, whoever owns it. What BYOD stands for
Which exams cover MDM?
MDM is on the official CompTIA acronym list for three of the four exams covered here.
- Security+ SY0-801: 4.1 (Security Operations).
- CySA+ CS0-004: 1.3 (Security Operations).
- A+ 220-1201 and 220-1202: 220-1201 1.0 (Mobile Devices); 220-1202 2.0 (Security).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A company must ensure every company phone has a screen lock and can be erased if it is lost. Which technology provides both?
- MDM
- A network switch
- A surge protector
- RAID 1
Show the answer
A. MDM. Enforcing device settings and sending a remote wipe are core MDM functions. The other options have nothing to do with managing phones.
2. An employee refuses to let the company manage a personal phone but needs work email on it. Which approach protects company data with the least control over the device?
- Full MDM enrolment with a device-wide wipe
- Application management that controls only the work applications
- Disabling the screen lock
- Sharing one mailbox password with the team
Show the answer
B. Application management that controls only the work applications. Managing only the work applications keeps company data in a controlled container and leaves the rest of the personal device alone.
Sources: NIST SP 800-124 Rev. 2, Guidelines for Managing the Security of Mobile Devices in the Enterprise; NIST glossary: mobile device management; Microsoft Learn: What is Microsoft Intune?. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.