Managing Device Security Flashcards
On a Mac, which type of account is required to perform software upgrades?
A. Local administrator
B. Network
C. Shared
D. Standard
A. Local administrator
A local administrator account is required to perform a software upgrade on a Mac.
Why would you defer software updates on Apple devices?
A. To roll back an update if it’s unsuccessful
B. To test critical apps and infrastructure before deploying the update
C. To verify that your organization’s iPhone and iPad devices are managed
B. To test critical apps and infrastructure before deploying the update
Testing apps and infrastructure before deployment is critical.
What is the maximum number of days that you can defer software updates on Apple devices?
A. 30
B. 60
C. 90
D. 99
C. 90
You can defer software updates up to 90 days.
Which payload manages the ability to schedule a scan of a managed Apple device?
A. Content Filter
B. Restrictions
C. Security & Privacy
D. Software Update
D. Software Update
Use the Software Update payload to manage the installation of macOS beta releases and automatic installation of macOS updates or app updates from the App Store.
How are security fixes distributed to Apple devices in a Rapid Security Response?
A. In minor software updates
B. In major software upgrades
C. In both major upgrades and minor updates
A. In minor software updates
Rapid Security Responses distribute security fixes in minor software updates.
Which payload do you use to configure specific rules when users create a password or passcode on their enrolled device?
A. Passcode
B. Password
C. Restrictions
D. Security & Privacy
A. Passcode
You choose the Passcode payload to configure specific rules for the creation of passwords or passcodes on enrolled devices.
What is the purpose of configuring a Passcode payload?
A. It helps retrieve a user’s passcode if the user can’t sign in for some reason.
B. It requires that users set passcodes for all apps that they use on their devices.
C. It enables your organization to change a user’s passcode remotely if a device is lost or stolen.
D. It enforces passcode rules that help prevent unauthorized access to your organization’s devices and data.
D. It enforces passcode rules that help prevent unauthorized access to your organization’s devices and data.
You configure a Passcode payload with specific rules that users must follow when creating a device passcode or password.
The Passcode payload configures passcode rules for iPhone and iPad devices, whereas the Password payload configures password rules for Mac computers.
A. True
B. False
B. False
The Passcode payload configures passcode rules for iPhone and iPad, as well as password rules for Mac.
What must a user do when you install the Passcode payload on the user’s iPhone?
A. The user must enter a passcode using the specified settings within 60 minutes.
B. The user must accept the payload to permit the specified settings to take effect.
C. The user must restart the device to install the payload, then enter a new passcode.
A. The user must enter a passcode using the specified settings within 60 minutes.
If the user doesn’t do so within that time frame, the payload forces the user to enter a passcode using the specified settings.
How can you tell if a restriction applies only to a supervised device?
A. The restriction description contains “(supervised only).”
B. The restriction displays only if a device is supervised.
C. The restriction is dimmed on unsupervised devices.
D. The restriction appears in the group named Supervised Restrictions.
A. The restriction description contains “(supervised only).”
MDM solutions indicate when a restriction applies only to supervised devices.
What is the purpose of configuring a Restrictions payload for Apple devices?
A. Restrictions prevent users from unenrolling a device from MDM.
B. Restrictions prevent unauthorized users from accessing a device.
C. Restrictions prevent users from accessing a specific app, service, or function of a device.
C. Restrictions prevent users from accessing a specific app, service, or function of a device.
You configure a Restrictions payload to prevent access to a specific app, service, or function on a device.
What happens if you select “(supervised only)” restriction settings for an unsupervised device?
A. The “(supervised only)” settings don’t take effect unless you have previously supervised the device.
B. The “(supervised only)” settings override any configuration that the user sets on the unsupervised device.
C. The “(supervised only)” settings require you to turn on device supervision before you can save the payload.
A. The “(supervised only)” settings don’t take effect unless you have previously supervised the device.
You can select “(supervised only)” settings for unsupervised devices, but the settings don’t take effect unless the device is supervised.
Which MDM restriction lets you manage a user’s ability to connect Thunderbolt or USB devices to a Mac?
A. Allow connected accessories while locked
B. Automatically enable accessory connections
C. Allow Thunderbolt or USB device connections
C. Allow Thunderbolt or USB device connections
The MDM restriction “Allow Thunderbolt or USB device connections” lets you manage a user’s ability to connect Thunderbolt or USB devices to a Mac by disabling the “Allow accessories to connect” setting in System Settings > Privacy & Security.
What happens when you select the “Allow connected accessories while locked” restriction and an iPhone or iPad device is connected to a computer with a compatible Ethernet adapter?
A. The device maintains a data connection to a connected network only when a user unlocks it.
B. The device maintains a data connection to a connected network before a user unlocks it.
C. The device automatically unlocks after an hour so that you can refresh it using MDM.
B. The device maintains a data connection to a connected network before a user unlocks it.
When you select the “Allow connected accessories while locked” restriction and an iPhone or iPad device is connected to a computer with a compatible Ethernet adapter, the device maintains a data connection even before a user unlocks it.
What’s required before you can restrict accessory connections on iPhone or iPad?
A. Device supervision
B. A Managed Apple ID
C. An unsupervised Apple device
A. Device supervision
Configurations to restrict accessory connections require that your iPhone and iPad devices be supervised.