You are working for a company that is operating a country-wide environmental monitoring system for real-time air pollution monitoring. The 10000 sensors of the system were provisioned 2 years ago by using a separate enrollment group in Azure DPS and they use X.509 certificates. The maintenance cycle of the NO2 sensors is 24 months, so some of them need to be detached from the IoT hubs temporarily. 
Which two actions should you complete as part of your task?

Answer options:

A.Disable the enrollment group in DPS
B.Delete the enrollment group in DPS
C.Disable the devices on the IoT Hub
D.Remove the devices from the enrollment group
E.Disable the X.509 certificate in DPS

Correct Answers: A and C
Option A is CORRECT because in the case of temporary deprovisioning you can simply disable the enrollment group.
Option B is incorrect because it is unnecessary to delete the enrollment group since you’re going to need it when the devices must reconnect.
Option C is CORRECT because in this case, the device on the IoT Hub should also be temporarily disabled.
Option D is incorrect because while you can remove the registration records (not the devices) of previously provisioned devices from the enrollment group, it is not needed in this scenario.Disable the enrollment group, instead.
Option E is incorrect because you cannot disable the X.509 certificate in DPS. What you can do is disabling the enrollment group (which disables the certificate, implicitly).
Reference: 

https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices