MDM Practice Questions Flashcards

(51 cards)

1
Q

Where can you locate MDM configuration profiles on an iPhone or iPad?

A. Settings > Privacy & Security > Profiles
B. Settings > General > VPN & Device Management
C. Settings > General > About > Profiles
D. Settings > Apple Account > Device Management

A

B. Settings > General > VPN & Device Management

Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where can you locate MDM configuration profiles on a Mac?

A. System Settings > Privacy & Security > Profiles
B. System Settings > General > About > Profiles
C. System Settings > General > Device Management
D. System Settings > Users & Groups > Profiles

A

C. System Settings > General > Device Management

Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What happens when a user unenrolls a personal managed device from MDM?

A. Only managed apps are removed
B. All managed apps and their data may be removed depending on MDM administrator settings
C. The device is automatically factory reset
D. Only configuration profiles are removed

A

B. All managed apps and their data may be removed depending on MDM administrator settings

Reference: Mobile Device Management - Troubleshoot issues with accessing an organization’s resources due to unenrolling a user-owned device from MDM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which enrollment type provides the most control over Apple devices?

A. User Enrollment
B. Device Enrollment
C. Automated Device Enrollment with supervision
D. Manual enrollment

A

C. Automated Device Enrollment with supervision

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the maximum time-based deferral period for software updates on supervised devices?

A. 30 days
B. 60 days
C. 90 days
D. 180 days

A

C. 90 days

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which Setup Assistant pane cannot be skipped if the device is registered in Apple Business/School Manager?

A. Apple Account
B. Touch ID/Face ID
C. Remote Management
D. Terms and Conditions

A

C. Remote Management

Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What happens when MDM skips a Setup Assistant pane?

A. The feature is permanently disabled
B. It uses the least secure default setting
C. It uses the more privacy-preserving default setting
D. The user must configure it manually later

A

C. It uses the more privacy-preserving default setting

Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following is an example of an MDM payload?

A. User photos and videos
B. Wi-Fi network configurations
C. Personal app data
D. Device serial number

A

B. Wi-Fi network configurations

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is required for macOS 13+ Setup Assistant when a device is registered in Apple Business/School Manager?

A. Ethernet connection
B. Administrator password
C. Internet connection
D. Apple Account sign-in

A

C. Internet connection

Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do software update deferrals differ between iPhone/iPad and Mac?

A. iPhone/iPad can defer longer than Mac
B. Mac can defer longer than iPhone/iPad
C. iPhone/iPad defers both updates and upgrades; Mac has different deferrals for updates, upgrades, and non-OS updates
D. They work exactly the same

A

C. iPhone/iPad defers both updates and upgrades; Mac has different deferrals for updates, upgrades, and non-OS updates

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What can MDM do regarding Rapid Security Responses?

A. They always follow normal deferral rules
B. They cannot be managed by MDM
C. They don’t follow deferral rules and can be managed separately
D. They are automatically installed regardless of MDM settings

A

C. They don’t follow deferral rules and can be managed separately

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which devices have built-in MDM frameworks?

A. Only iPhone and iPad
B. Only Mac computers
C. iPhone, iPad, Mac, Apple Watch, Apple Vision Pro, Apple TV
D. Only iOS and iPadOS devices

A

C. iPhone, iPad, Mac, Apple Watch, Apple Vision Pro, Apple TV

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the difference between an enrollment profile and a configuration profile?

A. They are the same thing
B. Enrollment profile contains identity certificates; Configuration profile contains settings payloads
C. Enrollment profile contains settings; Configuration profile contains certificates
D. Only enrollment profiles can be removed

A

B. Enrollment profile contains identity certificates; Configuration profile contains settings payloads

Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What type of file format are configuration profiles?

A. .json files
B. .plist files
C. .mobileconfig files
D. .xml files

A

C. .mobileconfig files

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which enrollment method is used for personal devices in organizations?

A. Automated Device Enrollment
B. Device Enrollment
C. User Enrollment
D. Manual enrollment

A

C. User Enrollment

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What can MDM control regarding automatic software updates?

A. Only download settings
B. Only installation settings
C. Both automatic download and installation settings
D. Neither download nor installation

A

C. Both automatic download and installation settings

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is enforcement in the context of MDM software updates?

A. Preventing any updates from installing
B. Setting a deadline for required updates regardless of deferrals
C. Automatically installing all updates immediately
D. Requiring user approval for all updates

A

B. Setting a deadline for required updates regardless of deferrals

Reference: Mobile Device Management - Review MDM payloads for Apple devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which Apple devices can be completely set up without user interaction when connected to Ethernet?

A. iPhone and iPad only
B. Mac only
C. Mac and Apple TV
D. All Apple devices

A

C. Mac and Apple TV

Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What happens to device access when a user unenrolls from MDM?

A. Only app access is lost
B. Device loses access to organization Wi-Fi, email, apps, and other managed resources
C. Nothing changes
D. Only email access is lost

A

B. Device loses access to organization Wi-Fi, email, apps, and other managed resources

Reference: Mobile Device Management - Troubleshoot issues with accessing an organization’s resources due to unenrolling a user-owned device from MDM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What might be required to restore organizational access after MDM unenrollment?

A. Device factory reset
B. Software update
C. IT administrator assistance to restore organizational access
D. New Apple Account

A

C. IT administrator assistance to restore organizational access

Reference: Mobile Device Management - Troubleshoot issues with accessing an organization’s resources due to unenrolling a user-owned device from MDM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which Setup Assistant pane allows users to migrate data from other devices?

A. Apple Account
B. Set Up as New or Restore
C. Touch ID/Face ID
D. Remote Management

A

B. Set Up as New or Restore

Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup

22
Q

What is the main purpose of MDM?

A. To track user activity
B. To manage devices and users in a consistent, scalable way
C. To prevent device usage
D. To monitor internet activity

A

B. To manage devices and users in a consistent, scalable way

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

23
Q

What can MDM do to devices regarding compliance?

A. Only check compliance
B. Monitor compliance with organizational policies
C. Ignore compliance issues
D. Only report compliance monthly

A

B. Monitor compliance with organizational policies

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

24
Q

What remote actions can MDM perform on devices?

A. Only view device information
B. Only install apps
C. Remotely wipe or lock devices
D. Only send messages

A

C. Remotely wipe or lock devices

Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device

25
What type of devices get both managed and supervised status? A. All enrolled devices B. User Enrollment devices C. Organization-owned devices enrolled via Automated Device Enrollment D. Device Enrollment devices
C. Organization-owned devices enrolled via Automated Device Enrollment Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device
26
Which of these is NOT an example of an MDM payload? A. Passcode policies B. FileVault settings C. User's personal photos D. Printer configurations
C. User's personal photos Reference: Mobile Device Management - Review MDM payloads for Apple devices
27
What does the presence of a configuration profile necessarily indicate? A. The device is definitely managed by MDM B. The device is supervised C. The device has MDM capabilities, but you must check for MDM enrollment profile specifically D. The device is enrolled in Apple Business Manager
C. The device has MDM capabilities, but you must check for MDM enrollment profile specifically Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed
28
What happens when a configuration profile is removed? A. Only settings are removed B. Only apps are removed C. All associated settings, apps, and data are removed D. Nothing is removed
C. All associated settings, apps, and data are removed Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed
29
Which profile type affects the entire device? A. User profiles B. Device profiles C. App profiles D. Network profiles
B. Device profiles Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed
30
What determines how much data is removed when a managed app is uninstalled? A. The user's choice B. The app developer's settings C. MDM administrator settings D. Apple's default settings
C. MDM administrator settings Reference: Mobile Device Management - Troubleshoot issues with accessing an organization's resources due to unenrolling a user-owned device from MDM
31
Which enrollment method provides the least organizational control? A. User Enrollment B. Device Enrollment C. Automated Device Enrollment D. They all provide the same control
A. User Enrollment Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device
32
What can MDM control regarding software and device settings? A. Only software settings B. Only device settings C. Update software/device settings D. Only security settings
C. Update software/device settings Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device
33
What is the main difference between updates and upgrades in MDM deferral settings? A. Updates are larger than upgrades B. Updates are security fixes; upgrades are major versions C. Updates are free; upgrades cost money D. There is no difference
B. Updates are security fixes; upgrades are major versions Reference: Mobile Device Management - Review MDM payloads for Apple devices
34
Which of these can MDM defer on Mac devices? A. Only OS updates B. Only app updates C. Updates, upgrades, and non-OS updates like Safari and XProtect D. Only security updates
C. Updates, upgrades, and non-OS updates like Safari and XProtect Reference: Mobile Device Management - Review MDM payloads for Apple devices
35
What are the three recommended cadence options for iOS/iPadOS updates? A. Immediate, delayed, never B. iOS 17 only, iOS 18 only, or user choice C. Automatic, manual, supervised D. Fast, medium, slow
B. iOS 17 only, iOS 18 only, or user choice Reference: Mobile Device Management - Review MDM payloads for Apple devices
36
What must be enabled for automatic software installation? A. Automatic downloads must be enabled B. MDM supervision C. Administrator approval D. User consent
A. Automatic downloads must be enabled Reference: Mobile Device Management - Review MDM payloads for Apple devices
37
Which Setup Assistant pane shows 'Get Started'? A. Apple Account B. Welcome C. Terms and Conditions D. Remote Management
B. Welcome Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup
38
When the Apple Account Setup Assistant pane is skipped, what happens? A. User must sign in later B. User can't enter Apple Account during setup C. A default account is created D. The device becomes unusable
B. User can't enter Apple Account during setup Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup
39
When the Passcode Setup Assistant pane is skipped, what happens? A. No passcode is set B. A default passcode is set C. User can't alter passcode from managed setting D. Passcode setup is delayed
C. User can't alter passcode from managed setting Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup
40
When Touch ID/Face ID Setup Assistant pane is skipped, what happens? A. It's enabled automatically B. User can't enable biometric authentication during setup C. It uses a default setting D. It's permanently disabled
B. User can't enable biometric authentication during setup Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup
41
What happens if Terms and Conditions pane is skipped? A. User must agree later B. Default terms are accepted C. Not shown if device serial appears in Apple Business/School Manager D. Setup cannot continue
C. Not shown if device serial appears in Apple Business/School Manager Reference: Mobile Device Management - Recognize how MDM is used to configure available Setup Assistant options during device setup
42
What is required for reenrollment after MDM unenrollment? A. Device factory reset B. New Apple Account C. May require IT administrator assistance D. Software update
C. May require IT administrator assistance Reference: Mobile Device Management - Troubleshoot issues with accessing an organization's resources due to unenrolling a user-owned device from MDM
43
What is the main difference between personal and organization-owned device unenrollment? A. No difference in implications B. Different implications for personal devices vs organization-owned supervised devices C. Personal devices lose more data D. Organization devices cannot be unenrolled
B. Different implications for personal devices vs organization-owned supervised devices Reference: Mobile Device Management - Troubleshoot issues with accessing an organization's resources due to unenrolling a user-owned device from MDM
44
What enhances deployment and management of devices, applications, configurations, and certificates? A. Apple Business Manager only B. iCloud services C. MDM solutions D. iTunes
C. MDM solutions Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device
45
Which Apple device types support MDM frameworks? A. Only mobile devices B. Only computers C. iPhone, iPad, Mac, Apple Watch, Apple Vision Pro, Apple TV D. Only iOS devices
C. iPhone, iPad, Mac, Apple Watch, Apple Vision Pro, Apple TV Reference: Mobile Device Management - Determine which device and user functions and settings MDM manages or restricts on an Apple device
46
What contains payloads that automate configuration of settings, accounts, restrictions, and credentials? A. Enrollment profiles B. Configuration profiles C. Device profiles D. User profiles
B. Configuration profiles Reference: Mobile Device Management - Review MDM payloads for Apple devices
47
What format are MDM configuration profiles saved as? A. .json extension B. .plist extension C. .mobileconfig extension D. .mdm extension
C. .mobileconfig extension Reference: Mobile Device Management - Review MDM payloads for Apple devices
48
What contains identity certificates and information to associate a device with an MDM solution? A. Configuration profiles B. Enrollment profiles C. Device certificates D. User profiles
B. Enrollment profiles Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed
49
What must you specifically check for to determine if a device is managed by MDM? A. Any configuration profile B. Device certificates C. MDM enrollment profile specifically D. User profiles
C. MDM enrollment profile specifically Reference: Mobile Device Management - Locate MDM configuration profiles on Apple devices to determine if the device is managed
50
What can MDM administrators do when setting up enforcement for software updates? A. Only suggest updates B. Set deadline for required updates regardless of deferrals C. Only delay updates D. Only monitor update status
B. Set deadline for required updates regardless of deferrals Reference: Mobile Device Management - Review MDM payloads for Apple devices
51
Why don't Rapid Security Responses follow normal deferral rules? A. They are too small B. They can be managed separately for security reasons C. They are automatically installed D. They are optional
B. They can be managed separately for security reasons Reference: Mobile Device Management - Review MDM payloads for Apple devices