Practice Exam Questions 2024 Flashcards by cppll 🌒

Which two Apple technologies use Bonjour for discovery?

A. SharePlay
B. SharePrint
C. AirPlay
D. AirPrint
E. AirDrop

C. Airplay & D. AirPrint

How well did you know this?

Not at all

Perfectly

Which wireless measurement determines the point at which Apple devices scan for roaming candidates?

A. Noise
B. Channel
C. Tx Rate
D. RSSI

D. RSSI (Received Signal Strength Indicator)

How well did you know this?

Not at all

Perfectly

Which setting directs app traffic through a network relay for managed iPad devices?

A. Match domains
B. Excluded domains
C. DomainUUID of the relay
D. RelayUUID of the relay

D. RelayUUID of the relay.

How well did you know this?

Not at all

Perfectly

Which ports should you open on your router for full Apple Push Notification service functionality?

A. TCP ports 443, 2197, and 5223
B. TCP ports 80, 548, and 5223
C. UDP ports 443, 2197, and 5223
D. UDP ports 80, 548, and 5223

A. TCP ports 443, 2197, and 5223

How well did you know this?

Not at all

Perfectly

You’re assisting the network team in troubleshooting an issue in communications with Apple services and APNs.
Which range should you exclude from routing filters to ensure full functionality?

A. 127.0.0.1 - 127.255.255.255
B. 16.0.0.0 - 16.0.0.24
C. 17.0.0.0/8
D. 192.0.0.0/8

C. 17.0.0.0/8

How well did you know this?

Not at all

Perfectly

Which setting is required when you use the Global HTTP Proxy payload for automatic proxy configuration?

A. Proxy server URL
B. Proxy type
C. Managed Apple ID user name and password
D. Port

A. Proxy server URL

How well did you know this?

Not at all

Perfectly

Which MDM payload can you configure to prioritize traffic using Cisco Fastlane enhanced Quality of Service on Mac computers?

A. Restrictions
B. Wi-Fi
C. VPN
D. Network Usage Rules

B. Wi-Fi

How well did you know this?

Not at all

Perfectly

You use MDM to ensure that managed iPhone traffic, destined for your organization domain and subdomains, is tunneled securely.
Which two settings should you configure in the Relay payload?
Select two.

A. RelayUUID
B. Match domains
C. Relays
D. Relay domains
E. Excluded domains

B. Match domains
C. Relays

How well did you know this?

Not at all

Perfectly

Mac users received a recently deployed Wi-Fi profile from MDM. They report they can no longer join the 802.1X network.
What is the most likely reason users can no longer join the Wi-Fi network?

A. Trust to the RADIUS server wasn’t established
B. The Wi-Fi network wasn’t configured to auto-join
C. The user accounts are locked
D. Network users forgot their passwords

A. Trust to the RADIUS server wasn’t established

How well did you know this?

Not at all

Perfectly

Which protocol should your organization use for Always-On VPN on iPhone and iPad devices?

A. IKEv2
B. L2TP over IPsec
C. SSL VPN
D. Cisco IPsec

A. IKEv2

How well did you know this?

Not at all

Perfectly

Which type of 802.1X configuration allows Mac computers to connect to Wi-Fi before login and user authentication after login?

A. System+User Mode
B. System+Login Window Mode
C. User Mode
D. System Mode

B. System+Login Window Mode

How well did you know this?

Not at all

Perfectly

In which order do iPhone, iPad, and Mac devices automatically join a Wi-Fi network?

A. Preferred network, public network, private networks
B. Private networks, preferred network, public network
C. Preferred network, private networks, public network
D. Public network, preferred network, pricate networks

C. Preferred network, private networks, public network

How well did you know this?

Not at all

Perfectly

Which two content caching settings could you use to optimize internet bandwidth for Apple devices over three network subnets?
Select two.

A. Cache content for: devices using the same public IP address
B. Cache content for: devices using the same local network
C. Cache content for: Only Shared Content
D. Cache content for: devices using custom local networks
E. Cache content for: Only iCloud Content

A. Cache content for: devices using the same public IP address
D. Cache content for: devices using custom local networks

How well did you know this?

Not at all

Perfectly

Your Apple devices are configured to send all traffic through an HTTP proxy. The devices aren’t receiving MDM requests.
Which service must be allowed on your network to allow your Apple devices to communicate with your MDM solution?

A. NAT
B. Federated Managed Apple ID
C. APNs
D. SSH

C. APNs

How well did you know this?

Not at all

Perfectly

What must be implemented on a network to allow iPad screen monitoring to work with Apple Classroom?

A. Apple School Manager
B. Mobile device management
C. Client-to-client communication
D. Client isolation

C. Client-to-client communication

How well did you know this?

Not at all

Perfectly

Which two settings should you confirm are configured on your network to ensure that users get notifications from APNs?
Select two.

A. Allow inbound connections from 17.0.0.0/8 or *apple.com
B. Turn off HTTPS Interception
C. Turn on HTTPS Interception
D. Allow outbound connections to 17.0.0.0/8 or *apple.com
E. Turn on client isolation from 17.0.0.0/8 or *apple.com

A. Allow inbound connections from 17.0.0.0/8 or *apple.com
D. Allow outbound connections to 17.0.0.0/8 or *apple.com

How well did you know this?

Not at all

Perfectly

Which type of enrollment results in a Mac that’s managed and unsupervised?

A. Account-driven Device Enrollment
B. Automated Device Enrollment
C. Account-driven User Enrollment
D. Profile-based Device Enrollment

D. Profile-based Device Enrollment

How well did you know this?

Not at all

Perfectly

Which two capabilities does Apple’s MDM framework provide on an organization-owned managed device?
Select two.

A. Updating software
B. Remotely wiping or locking
C. Reading SMS messages
D. Reporting user browser history
E. Diagnosing hardware issues

A. Updating software
B. Remotely wiping or locking

How well did you know this?

Not at all

Perfectly

Which of these is a reason a user can’t change firewall settings on their organization-owned managed Mac?

A. MDM manages the firewall
B. Gatekeeper manages the firewall
C. XProtect manages the firewall
D. Secure Enclave manages the firewall

A MDM manages the firewall

How well did you know this?

Not at all

Perfectly

Which type of declarations isn’t supported in declarative device management?

A. Configurations
B. Enrollments
C. Activations
D. Assets

B. Enrollments

How well did you know this?

Not at all

Perfectly

What allows a device to asynchronously apply settings and report status to the MDM solution without constant polling?

A. Apple async notification server
B. Supervision
C. Declarative device management
D. Automated Device Enrollment

C. Declarative device management

How well did you know this?

Not at all

Perfectly

You’re resetting several iPad devices for new users. The iPad devices don’t progress past the Apple logo after restart.
Which of these should you do?

A. Get a bypass code from the MDM administrator to clear Activation Lock
B. Send the Return to Service command from the MDM solution
C. Use Apple Configurator for iPhone to restore the iPad devices.
D. Use Apple Configurator for Mac to restore the iPad devices.

D. Use Apple Configurator for Mac to restore the iPad devices.

How well did you know this?

Not at all

Perfectly

Your organization buys devices from a new Apple Authorized Reseller. You want to ensure that your devices appear in Apple Business Manager or Apple School Manager.
What information do you need to add in Apple Business Manager or Apple School Manager?

A. Purchase Order Number
B. D-U-N-S Numer
C. Organization ID
D. Reseller Number

D. Reseller Number

How well did you know this?

Not at all

Perfectly

Your organization begins buying from a new Apple Authorized Reseller.
What information do you give the reseller to ensure that your devices appear in Apple Business Manager or Apple School Manager?

A. D-U-N-S Number
B. Purchase Order Number
C. Organization ID
D. Reseller Number

C. Organization ID

How well did you know this?

Not at all

Perfectly

Your organization wants to prevent devices from being unenrolled from the MDM server. Which enrollment type can you configure to prevent unenrollment? A. Automated Device Enrollment B. Automated User Enrollment C. Account-driven Device Enrollment D. Profile-based User Enrollment

A. Automated Device Enrollment

Your Mac is supervised. Which two enrollment types might have been used to enroll your Mac? Select two. A. Declarative-driven Device Enrollment B. Automated Device Enrollment C. Account-driven User Enrollment D. Manual Enrollment E. Account-driven Device Enrollment

B. Automated Device Enrollment D. Manual Enrollment

What is required to enroll a device using account-driven Device Enrollment? A. A Managed Apple ID B. A Personal Apple ID C. A passkey D. An identity provider (IdP)

A. A Managed Apple ID

Which two Apple devices support the Network Usage Rules MDM payload? Select two. A. iPhone B. Mac C. Apple Watch D. Apple TV E. iPad

A. iPhone E. iPad

Which technology synchronizes local account credentials with an identity provider? A. Platform SSO B. Kerberos SSO C. Active Directory D. Microsoft Entra ID

A. Platform SSO

Which technology, commonly used for Active Directory or Open Directory, does enterprise single sign-on support in iOS, iPadOS, and macOS? A. Passkeys B. Kerberos C. User-driven password resets D. Automatic FileVault rotation

B. Kerberos

You're signed in to your personal Apple ID on your iPhone. You used your managed Apple ID to enroll your iPhone. What is the result? A. You're prompted to sign out of your personal Apple ID B. An additional iCloud Drive appears in the Files app C. Your personal iCloud Drive is replaced with your organizational iCloud Drive until you unenroll your iPhone D. You're automatically signed out of your personal Apple ID

B. An additional iCloud Drive appears in the Files app

You used account-driven Device Enrollment to enroll your iPhone. Which two of these data types cryptographically separates organizational and personal data? Select two. A. Safari bookmarks B. Visual Voicemail messages C. Contacts D. Calendar E. Notes

C. Contacts D. Calendar

Which Content Caching setting caches only operating system and app updates? A. App and operating system Updates. B. Only Apple Content C. Only Shared Content D. Only operating system Updates and App Content

C. Only Shared Content

You're resetting the password for the only account on a Mac. FileVault was enabled through MDM. What do you need from your MDM solution? A. A FileVault token B. User name and password of the account that created the MDM server token C. Personal recovery key D. Institutional recovery key

D. Institutional recovery key

You start up your MacBook Pro by pressing and holding the power button. Then you click System Settings. You're asked to select a user and enter that user's password. Why are you asked to select a user and enter that user's password? A. FileVault is turned on B. Recovery Lock is enabled C. Lockdown Mode is turned on D. Startup Security Utility is set to Full Security

A. FileVault is turned on

You added macOS content caching to your network. Which two content types can the server cache for users on your network? Select two. A. SharePoint files for Managed Apple IDs B. Apple Music content C. Frequently requested web content and files D. Operating system updates E. Apple Books content

D. Operating system updates E. Apple Books content

Which Mac app gives you the ability to query network responsiveness and quality? A. Network Utility B. Activity Monitor C. Apple Diagnostics D. Terminal

D. Terminal

Where is content cached when you simultaneously provision tethered iPad devices using Apple Configurator? A. On the MDM content caching server B. On the iCloud server C. On the Mac that the iPad devices are tethered to D. On the MDM server that the iPad devices are tethered to

C. On the Mac that the iPad devices are tethered to

Which two apps are available only when your Mac starts up in macOS Recovery? Select two. A. Safari B. Disk Utility C. Startup Security Utility D. Terminal E. Share Disk

C. Startup Security Utility E. Share Disk

Where are two places you can review website passwords that you saved using Safari on your Mac? Select two. A. In Passwords in Safari Settings B. In Privacy in Safari Settings C. In the Secure Keychain app in the Utilities folder D. In Privacy & Security in System Settings E. In Passwords in System Settings

A. In Passwords in Safari Settings E. In Passwords in System Settings

You deploy a managed app to a supervised iPad that had an unmanaged version of the app installed. What happens? A. The user is prompted to accept the app B. The unmanaged app converts to managed C. The app remains unmanaged D. Both copies of the app remain on the supervised iPad

B. The unmanaged app converts to managed

What are two functions of Secure Enclave? Select two. A. Encrypt tokens for Recovery Lock, Bypass Code, and Personal Recovery Key B. Store certificates to secure mail, web, and other internet traffic C. Secure MDM communications and APNs notifications D. Provide secure generation and storage of keys for encrypting data at rest E. Process data from Face ID and Touch ID sensors

D. Provide secure generation and storage of keys for encrypting data at rest E. Process data from Face ID and Touch ID sensors

When are you required to enter your password on a Mac with Touch ID turned on? A. When Safari autofills passwords B. After your Mac is locked for 24 hours C. After you update macOS D. When you install a downloaded application

C. After you update macOS

You used MDM to set organization-linked Activation Lock. You can't remove Activation Lock from a device that a user returned. Which account user name and password gives you the ability to remove Activation Lock? A. The Apple ID of the previous user of the device B. The account that created the device enrollment token that links to the MDM solution C. The Apple ID used for the Apple Push Notification service D. The Managed Apple ID of the previous user of the device

B. The account that created the device enrollment token that links to the MDM solution

Which MDM command restricts access to Startup Security Utility on a Mac with Apple Silicon? A. SetAccessSSUtility B. SetRecoveryLock C. SetFDESetup D. SetFirmwarePassword

B. SetRecoveryLock

A user reports that they lost their supervised iPhone. What should you do to protect the organization's data? A. Enable Find My in Apple Business Manager or Apple School Manager B. Enable Find My in the MDM server C. Enable Lost Mode in Apple Business Manager or Apple School Manager D. Enable Lost Mode in the MDM server

D. Enable Lost Mode in the MDM server

You enabled FileVault for organization-owned Mac computers. You also need to be able to reset user passwords on those Mac computers. What should you escrow to the MDM server? A. Bypass code B. Secure token C. Institutional recovery key D. Personal recovery key

D. Personal recovery key

What should you do to prevent camera use on a supervised iPhone or iPad? A. Set the allowCamera restriction to true B.Deploy Camera as a managed app C. Use Managed Open In restrictions to control the Camera App D. Set the allowCamera restriction to false.

D. Set the allowCamera restriction to false.

Your organisation's security team wants you to disable AirDrop on managed iPhone devices from your MDM solution. Which requirement must each iPhone meet so that you can disable AirDrop? A. They must be enrolled using account-driven User Enrollment B. They must be supervised C. The must be enrolled using account-driven Device Enrollment D. They must use a Managed Apple ID

B. They must be supervised

You used MDM to disable "allow pairing with non-Apple Configurator hosts" on the organization's managed iPad devices. When you use a USB cable to connect a managed iPad to a Mac, the iPad doesn't connect. What must be on the Mac to allow the iPad to connect? A. Server Token B. Configuration Identity C. Intermediate Certificate D. Supervision Identity

D. Supervision Identity

Which action helps you reduce local network traffic when you deploy a content caching server? A. Use the "AssetCacheManagerUtil loadCache" command to preload commonly downloaded apps every night B. Use an MDM restriction to prevent content caching from being turned off for every users's managed Mac C. Use an MDM restriction to prevent content caching from being turned on for every user's managed Mac D. Use the "assetcachelocatorutil" command to define your content caching server location for every user's managed device

D. Use the "assetcachelocatorutil" command to define your content caching server location for every user's managed device

What can be provided in response to an MDM query of user-enrolled devices? A. Managed app status B. Device location C. Safari browser history D. Lost Mode status

A. Managed app status

Which two of these can MDM optionally provide with the "EraseDevice" command when you use the Return to Service workflow? Select two. A. MDM Configuration profile B. Preserve supervision status C. Register data plan D. Location Services E. Wi-Fi payload

A. MDM Configuration profile E. Wi-Fi payload

What can you deploy from MDM to prevent users from accessing a specific app on managed iPhone devices? A. Access control entries B. Supervision payload C. Access control lists D. Restriction payloads

D. Restriction payloads

What is the maximum number of days that you can defer software updates and upgrades when you use MDM? A. 256 B. 180 C. 90 D. 365

C. 90

What is required to enable Managed Lost Mode using MDM? A. Find My B. Location Services C. Supervision D. Managed Apple ID

C. Supervision

What contacts Apple servers directly to unlock a managed Apple device that's locked with an organization-linked Activation Lock? A. Apple Push Notification service (APNs) B. The MDM solution C. Apple ID Activation Service D. Apple Business Manager or Apple School Manager

B. The MDM solution

You pushed these two payloads to your iPad devices: -An MDM passcode policy that requires a simple passcode with a minimum of 15 characters -A Microsoft Exchange policy that requires a complex passcode with a minimum of eight characters What's enforced? A. A complex passcode with a minimum of 15 characters B. A simple passcode with a minimum of eight characters C. A complex passcode with a minimum of eight characters D. A simple passcode with a minimum of 15 characters

A. A complex passcode with a minimum of 15 characters

You want to require your users to enter a complex password during device setup. Which enrollment type should you use? A. Account-driven Device Enrollment B. Automated User Enrollment C. Account-driven User Enrollment D. Automated Device Enrollment

D. Automated Device Enrollment

Which MDM restriction prevents the copying and pasting of data between managed sources in unmanaged destinations? A. Managed Pasteboard B. Restrict App Privacy Settings C. Managed Clipboard D. Restrict App Configuration Settings

A. Managed Pasteboard

Which Rapid Security Response payload setting can you deploy from an MDM solution? A. Allow MDM to install responses B. Allow MDM to disable responses C. Allow MDM to delay responses D. Allow MDM to remove responses

A. Allow MDM to install responses

Your organization’s custom app delivers internal security alerts. Which two MDM settings do you need to ensure delivery of internal security alerts on managed iPhone devices? Select two. A. Mark the app as nonremovable. B. Prevent removal of system apps, including Settings. C. Use the Enable Automatic Proxy Configuration payload to prioritize the app’s traffic. D. Configure the notifications MDM payload. E. Enable Safari pop-up windows for the app’s domain.

A. Mark the app as nonremovable D. Configure the notifications MDM

Which restriction can you push to a supervised iPad to remove the App Store icon from the Home Screen? A. Install apps using App Store B. Allow app installation from a website C. Automatic app downloads D. Modify account settings

A. Install apps using App Store

Which app do you use to manually add iPad devices to Apple Business Manager or Apple School Manager? A. Mac Configuration Utility B. Apple Configurator for iPhone C. Apple Configurator for Mac D. iPad Configuration Utility

C. Apple Configurator for Mac

You upload your MDM solution’s certificate to Apple Business Manager. What does Apple Business Manager generate? A. Private key B. MDM Intermediate Certificate C. Content token D. Server token

D. Server token

What do you need to do before you can sync Microsoft Entra ID user data with Apple Business Manager? A. Configure a People Manager account. B. Configure and turn on federated authentication. C. Link Microsoft Intune to Apple Business Manager. D. Configure a Federation Manager account.

B. Configure and turn on federated authentication.

Which authentication protocol do you use in Apple Business Manager to sync user accounts from your identity provider? A. Kerberos Connect B. OpenID Connect C. MS-CHAP D. RADIUS

B. OpenID Connect

Users in your organization visit a web address to enroll devices. They also use the same Apple ID to install apps. Which two changes should your organization implement for a more efficient workflow? Select two. A. Multiple personal Apple IDs B. Automated Device Enrollment C. Managed distribution D. Device groups for management E. Federated authentication

B. Automated Device Enrollment C. Managed distribution

Which two features are available in both Apple Business Manager and Apple School Manager? Select two. A. Directory Sync B. Bulk app purchases C. Inspect a user account D. App redemption codes E. SIS/SFTP support

A. Directory Sync B. Bulk app purchases

Which of these account roles in Apple Business Manager or Apple School Manager can enable federated authentication? A. Content Manager B. Authentication Manager C. People Manager D. Device Enrollment Manager

C. People Manager

Which statement is true about Managed Distribution for books? A. Books can be distributed only to a personal Apple ID. B. Books can be distributed only to a Managed Apple ID. C. Books can be distributed only to devices. D. Books can be distributed only to users.

B. Books can be distributed only to a Managed Apple ID

When does the 30-day provisional period begin after you manually add Apple devices to Apple School Manager? A. After the device is available in Apple School Manager B. After you enroll the devices in the MDM solution C. After you assign the device to a location D. After you assign the devices to the MDM solution

D. After you assign the devices to the MDM solution

What must you upload to your MDM solution so that you can distribute Apps and Books Store content? A. Managed certificate B. Distribution certificate C. Server token D. Content token

D. Content token

Where do you upload the content token to enable Managed Distribution of apps and books? A. Your Apple Business Manager account B. Managed Distribution Utility C. Your MDM solution D. Apple Configurator for iPhone

C. Your MDM solution

Which two roles can transfer app licenses in Apple Business Manager or Apple School Manager? Select two. A. Staff B. Device Enrollment Manager C. App Manager D. Administrator E. Content Manager

D. Administrator E. Content Manager

Which profile type connects a device to MDM? A. Provisioning B. Enrollment C. Assignment D. Supervision

B. Enrollment

Your organization is migrating to a new MDM solution. iPhone and iPad devices were previously enrolled using Automated Device Enrollment. What must you do before you can enroll the devices in a new MDM solution using Automated Device Enrollment? A. Revive the devices. B. Send a remote wipe command from Apple School Manager or Apple Business Manager. C. Erase the devices. D. Release the devices in Apple School Manager or Apple Business Manager.

C. Erase the devices.

What must you enter on a device for account-driven User Enrollment? A. The MDM solution enrollment URL B. A Managed Apple ID C. The Apple Business Manager or Apple School Manager enrollment URL D. A personal Apple ID

B. A Managed Apple ID

Lockdown Mode prevents which type of profile from being installed on a device from an MDM solution? A. Configuration B. Supervision C. Enrollment D. Provisioning

A. Configuration

What must you do to allow Auto Advance during Automated Device Enrollment for Mac? A. Connect the Mac to an active Ethernet connection. B. Connect the Mac to a power source. C. Press and hold the power button for up to 10 seconds. D. Press and hold Shift-Up Arrow on the right side of the keyboard.

A. Connect the Mac to an active Ethernet connection.

Which data can MDM solutions access when an iPhone is enrolled using account-driven Device Enrollment? A. Safari browsing history B. Device location and Significant Locations C. Phone call logs D. Capacity and space available

D. Capacity and space available

Which enrollment type gives you the ability to send the iPad Home Screen Layout payload? A. Automated User Enrollment B. Account-driven User Enrollment C. Automated Device Enrollment D. Account-driven Device Enrollment

C. Automated Device Enrollment

Which two of these devices can Apple Configurator for Mac add to Apple School Manager or Apple Business Manager? Select two. A. Apple TV B. Mac C. Apple Watch D. Apple Vision Pro E. iPad

A. Apple TV E. iPad

You configure a Setup Assistant payload to skip the Location Services pane. What is the Location Services status during and after enrollment? A. Location Services is hidden during Setup Assistant and turned off, but a user can turn it on. B. Location Services is shown during Setup Assistant and turned off, but a user can turn it on. C. Location Services is shown during Setup Assistant and turned off, but an administrator can turn it on. D. Location Services is hidden during Setup Assistant and turned off, but an administrator can turn it on.

A. Location Services is hidden during Setup Assistant and turned off, but a user can turn it on.

Which enrollment type for Mac results in supervision and also cryptographically separates organization keychain items from personal keychain items? A. Automated User Enrollment B. Account-driven User Enrollment C. Automated Device Enrollment D. Account-driven Device Enrollment

B. Account-driven User Enrollment

You push a restriction payload to prevent the developer team from using Camera on their iPhone devices. You also push a restriction payload without a camera restriction for the marketing team on their iPhone devices. One user is assigned to both teams. What is the user’s experience? A. The user can use Camera. B. The user can use Camera in managed apps only. C. The user can’t use Camera. D. The user can use Camera in unmanaged apps only.

C. The user can’t use Camera.

Which two enrollment types result in cryptographic separation of organization Calendar and personal Calendar data on iPhone and iPad devices? Select two. A. Profile-driven User Enrollment B. Account-driven User Enrollment C. Automated User Enrollment D. Automated Device Enrollment E. Account-driven Device Enrollment

A. Profile-driven User Enrollment B. Account-driven User Enrollment