Latest Jamf 100 Flashcards
1
Q
What is Jamf Pro?
A
A mobile device management (MDM) solution designed to manage Apple devices in an enterprise environment.
2
Q
What are the core functions of Jamf Pro?
A
Deployment, configuration management, application management, security enforcement, device inventory and monitoring.
3
Q
Why use Jamf Pro?
A
Centralizes management, reduces manual configuration, and simplifies deployment, security, and app management at scale.
4
Q
What is Automated Device Enrollment (ADE)?
A
A system using Apple’s DEP to automatically enroll devices into Jamf Pro during setup.
5
Q
What systems integrate with Jamf Pro for ADE?
A
Apple School Manager (ASM) and Apple Business Manager (ABM).
6
Q
What is manual enrollment?
A
A process to enroll devices not part of ADE, done via the Jamf Pro server using user credentials.
7
Q
What are Smart Groups?
A
Dynamic device groups that update automatically based on set criteria.
8
Q
What are Static Groups?
A
Manually created groups for custom device management.
9
Q
What are configuration profiles?
A
Tools to manage device settings like Wi-Fi, VPN, email, and restrictions.
10
Q
How are apps deployed using Jamf Pro?
A
Through the Volume Purchase Program (VPP), allowing bulk deployment of apps.
11
Q
What is Self Service in Jamf Pro?
A
A user portal to install apps, profiles, and settings without IT help.
12
Q
What can security policies in Jamf enforce?
A
Passcode complexity, encryption, remote lock/wipe.
13
Q
How are non-compliant devices monitored?
A
Through Smart Groups and compliance status reports.
14
Q
What does the Jamf Pro Dashboard show?
A
A high-level overview of device health, compliance, and installed apps.
15
Q
In what formats can reports be exported?
A
CSV, PDF, and Excel.
16
Q
Name 4 remote commands Jamf Pro can send.
A
Lock, wipe, restart, reboot.
17
Q
What’s the purpose of Remote Lock and Wipe?
A
Protect or erase data on lost or stolen devices.
18
Q
How can Jamf Pro help troubleshoot a device?
A
Reviewing logs, profiles, and configuration details.
19
Q
What is important for Jamf Pro Server maintenance?
A
Regular backups and updates.
20
Q
Where can Jamf Pro be hosted?
A
On-premises or in the cloud.
21
Q
What are admin roles used for?
A
To control access and permissions for different users.
22
Q
What is Zero-Touch Enrollment?
A
Automating device setup without user interaction.
23
Q
Why customize the Self Service portal?
A
To ensure users can easily access approved resources.
24
Q
What is an App Sandbox?
A
A self-contained environment where iOS apps run.
25
How do you access Control Center on iPhone X or later?
Swipe down from the top right.
26
What informs users of potential in-app costs?
The “In-App Purchases” label.
27
What does the command ls do?
Lists contents of a directory.
28
What file extension is used for property list files?
.plist
29
What does Command-Space bar do on macOS?
Opens Spotlight.
30
What does MDM allow organizations to do?
Wirelessly configure, update, and deploy content to devices.
31
What certificate is needed for MDM/APNs communication?
A push certificate.
32
What file types can be exported from inventory search?
TSV, CSV, XML.
33
What does a configuration profile without a scope apply to?
All devices.
34
What wildcard can be used in a simple search?
*
35
What happens when you issue a Lock Computer command?
Logs out the user, restarts the computer, and sets a firmware passcode.
36
What determines when a policy runs?
The policy's trigger.
37
Can configuration profiles be scoped to categories?
Yes.
38
What does the Settings app on iOS and iPadOS allow users to do?
View device info, customize preferences, and manage settings.
39
How does the iPadOS Settings app compare to the iOS version?
It's functionally and organizationally similar.
40
What does signing in with an Apple ID enable?
Access to Apple services like iCloud and the App Store.
41
Is using an Apple ID required?
No, but some features won't be available without it.
42
What can Jamf Pro do with iOS/iPadOS settings?
Customize and restrict settings to enforce standards.
43
Where are commonly accessed settings located?
Near the top of the Settings list (e.g., Wi-Fi, Bluetooth).
44
What can be found in the General > About section?
Device name, software version, storage capacity, etc.
45
What is the purpose of the Software Update section?
Enable automatic updates and install available updates.
46
What does the Transfer & Reset section do?
Prepares the device for transfer or erases all content.
47
What can be customized in Touch ID/Face ID & Passcode?
Services that use biometrics, passcode settings, and lock timer.
48
Where can users configure settings in macOS?
System Settings.
49
What can Jamf Pro do with macOS settings?
Manage and enforce them.
50
Do settings names vary by macOS version?
Yes.
51
What is found in General > About on macOS?
Device name, OS version, storage, and more.
52
What does the Software Update section allow?
Enabling and installing system updates.
53
What’s the purpose of the Transfer & Reset section?
Move data or erase all content.
54
What info does the System Information Application provide?
Hardware, network, and installed software details.
55
What can users manage in Privacy & Security settings?
Location, camera/mic, screen recording, FileVault.
56
What is required to change locked settings?
Administrator credentials.
57
What does the search field in System Settings do?
Helps find specific settings quickly.
58
How many volumes do iOS/iPadOS devices have?
Two: system volume and data volume.
59
What is stored in the system volume?
The operating system and system data.
60
What is stored in the data volume?
User data (encrypted if a passcode is set).
61
What does Shared iPad do with storage?
Creates separate data volumes for multiple users.
62
What is an app sandbox?
An app sandbox is a security mechanism in macOS and iOS that restricts what an app can do and what data it can access.
63
What is app data?
App data refers to the information that an app stores or uses to function properly. This can include:
🔹 **User Data:**
* Preferences
* Login info
* Saved files or documents
🔹 **Configuration Data:**
Setup details
🔹 **Cache**
🔹 **Database Files:**
Local databases (like SQLite) that store structured info
In Jamf Pro, "app data", often refers to the metadata Jamf pulls in from the App Store — like:
* App name
* Version
* Description
This data helps IT admins manage apps more easily, automate updates, and deploy the correct versions.User-generated content like high scores or documents.
64
Where can app data be stored?
Locally or backed up to iCloud/servers.
65
What happens to local app data when an app is deleted?
It is removed, but cloud backups may remain.
66
What file system does macOS use by default?
APFS (Apple File System).
67
How many volumes are in the default APFS container?
Five.
68
What is stored in the system volume?
Startup files and built-in apps.
69
What is stored in the data volume?
User files, documents, and user-installed apps.
70
What is SIP (System Integrity Protection)?
A security tech protecting core system files.
71
What processes can modify SIP-protected areas?
Only Apple-signed processes (updates/installers).
72
What does Disk Utility do?
Views and modifies disk volumes.
73
What are the four root directories in macOS?
Applications, Library, System, and Users.
74
Who has access to the Shared directory?
All users on the Mac.
75
What info is found on an App Store app page?
Description, user reviews, and app privacy info.
76
What is required to install apps from the App Store?
An Apple ID.
77
How do you install an app from the App Store?
Tap “Get” or purchase, then confirm installation.
78
How do you install apps from the internet on macOS?
Download, open the disk image, and follow instructions.
79
What is Gatekeeper?
A macOS feature that checks downloaded apps for threats.
80
How do you delete an app on iOS/iPadOS?
Long press > Remove from Home Screen or Delete.
81
How do you delete an app on macOS?
Drag it from the Applications folder to the Trash.
82
How can Jamf Pro manage apps on devices?
Deploy or restrict apps without needing personal Apple IDs.
83
What are examples of macOS preferences?
Dock layout, browser home page, light/dark mode.
84
Where are app preferences stored in macOS?
In property list (PLIST) files.
85
What is the format and extension of PLIST files?
XML format, .plist file extension.
86
What app can properly display binary-formatted PLIST files?
Xcode.
87
What macOS feature previews PLIST files without editing?
Quick Look (press Space on selected file).
88
Where are system-wide preferences stored?
/Library/Preferences.
89
Where are user-specific preferences stored?
~/Library/Preferences.
90
How can you access the hidden user Library folder?
Go to Finder > Go menu > hold Option key.
91
What macOS process may delay writing preferences to disk?
cfprefsd
cfprefsd = Core Foundation Preferences Daemon
Purpose:
• It reads, writes, and manages system and user preferences on macOS.
• Works behind the scenes when you change system settings, app preferences, or configurations.
• Apps and the system use it to access or modify .plist (property list) files that store preferences.
⸻
Key Details:
• Launched automatically by the system.
• Located at: /usr/libexec/cfprefsd
• Runs as multiple instances: one for each user and one for system-level settings
92
How can Jamf Pro manage PLISTs?
Deploy them remotely to control app preferences.
93
What does MDM allow organizations to do?
Remotely configure, secure, and deploy content to devices.
94
How does Jamf Pro communicate with devices?
Through Apple Push Notification service (APNs).
95
What are the steps of MDM communication via APNs?
1. Jamf Pro contacts APNs
2. APNs notifies device
3. Device contacts Jamf Pro
4. Device confirms success to APNs
5. APNs confirms to Jamf Pro.
96
What is declarative device management?
An enhanced MDM protocol for faster, more stable management.
97
What is needed for MDM communication?
A push certificate, renewed yearly.
98
Why use an organizational Apple ID for push certs?
It ensures continuity and access for renewals.
99
What must be true for MDM commands to work?
Devices and Jamf Pro must have internet access to APNs.
100
What features of Jamf Pro rely on MDM?
Remote commands, configuration profiles, app deployment.
101
What does APNs allow for in MDM?
Remote management of Apple devices.
102
What happens if a device is offline?
It cannot receive MDM commands.
103
What are Apple Business Manager and Apple School Manager used for?
1. App/book license distribution
2. Automated enrollment
3. Managed Apple ID creation.
104
What are Managed Apple IDs used for?
**SCAFF-C**
S
Services Access
iCloud, iWork, Schoolwork
C
Collaboration
Work together in iCloud & iWork
A
App & Book Assignment
Org gives out apps & books
F
Federated Login
Sign in with Google or Microsoft
F
Flexible Shared iPads
Personalized experience in class
C
Controlled by Admins
Admins manage settings/passwords.
Common Uses of Managed Apple IDs:
**1. Access to Apple Services**:
Users can sign in to Apple services like iCloud, iWork (Pages, Numbers, Keynote), and Apple Schoolwork or Apple Business Essentials.
**2. Collaboration**:
Enable users to collaborate in iCloud Drive and iWork apps, just like with personal Apple IDs.
**3. App and Book Assignments**:
Used with volume-purchased apps or books distributed by the organization.
**4. Shared iPad and Classroom Use** (in education):
Support Shared iPad, so multiple students can use the same device with individual Managed Apple IDs and have personalized experiences.
**5. Federated Authentication**:
Often linked to Microsoft Azure AD or Google Workspace for easy sign-in with existing school or company credentials.
**6. Controlled Environment**:
Admins can reset passwords, set limits, and control access, unlike with personal Apple IDs.
🚫 What They Can’t Do:
**Can’t be used to purchase media from the App Store, iTunes Store, or Apple Books.**
105
What does GSX integration allow?
View warranty details in Jamf Pro.
106
Are all services globally available?
No, availability varies by country/region.
107
What is Jamf Pro?
Jamf Pro is a comprehensive Apple device management solution designed for IT administrators to manage macOS, iOS, iPadOS, and tvOS devices across an organization.
**Key Features** of Jamf Pro:
**- Device Enrollment**: Automates the setup and configuration of new Apple devices using Apple’s Automated Device Enrollment (formerly DEP).
**- App Management**: Distributes and manages apps through the App Store, custom apps, or third-party sources.
**- Configuration Profiles**: Applies settings and restrictions to devices (like Wi-Fi, VPN, email configurations).
**- Inventory Management**: Collects detailed hardware and software data from each managed device.
**- Self Service**: A customizable app where users can install pre-approved apps, run scripts, or access resources.
**- Security Management**: Enforces security settings, remotely locks or wipes devices, and monitors compliance.
108
Where can Jamf Pro be hosted?
Jamf Cloud or on-premise.
109
What info does the Jamf Pro Dashboard show?
1. Enrolled devices
2. Smart group counts
3. Policy and config statuses
4. Patch management reports.
110
Can users customize the dashboard?
Yes.
111
What are the four primary sidebar sections in Jamf Pro?
Computers, Devices, Users, Settings.
112
What does the Computers section manage?
Mac inventory and configurations.
113
What does the Devices section manage?
iPhones, iPads, Apple TVs, Vision Pro, Apple Watches.
114
What is the Users section for?
App and book distribution by user.
115
What can you do in the Settings section?
Customize server settings and integrations.
116
What is the Resource Center?
A help hub with links, community, and technical info.
117
Where are Jamf user accounts managed?
Settings > System > User Accounts and Groups.
118
What are Jamf user accounts used for?
Authentication and performing management tasks.
119
What are the four main privilege sets in Jamf?
1. Administrator (full access)
2. Auditor (read-only)
3. Enrollment Only
4. Custom (granular control).
120
What are user groups used for?
Assign the same privileges to multiple users.
121
What happens if a user is in multiple groups?
They receive all privileges from each group.
122
What are categories used for in Jamf Pro and Self Service?
To organize apps, configuration profiles, and policies.
123
What determines the display order of categories in Self Service?
Category priority—lower numbers have higher priority.
124
What are buildings and departments used for in Jamf Pro?
To organize devices and configure scope and search criteria.
125
Can a device belong to more than one building or department at a time?
No, only one building and one department per device.
126
What is the goal of Automated Device Enrollment?
To integrate Apple Business/School Manager with Jamf Pro for automatic device setup and enrollment.
127
What is a PreStage enrollment?
A Jamf Pro configuration that customizes Setup Assistant and automates device enrollment.
128
What is required for zero-touch deployment?
Devices must be assigned to a default MDM server in Apple Business/School Manager.
129
What kinds of devices can be added automatically to Apple Business/School Manager?
Devices purchased through business or education channels.
130
What is user-initiated enrollment?
A method where users enroll their own devices into Jamf Pro after Setup Assistant.
131
Is supervision enabled with user-initiated enrollment on iOS?
No, not on iOS/iPadOS.
132
Is supervision enabled with user-initiated enrollment on macOS 11 or later?
Yes.
133
Can users remove management from devices enrolled this way?
Yes, at any time.
134
What URL is used for user-initiated enrollment?
[Jamf Pro server URL]/enroll (or :8443/enroll for on-premise servers).
135
What do simple inventory searches in Jamf Pro use?
Device attributes like name, serial number, OS, and IP address.
136
What symbol is used as a wildcard in Jamf Pro searches?
The asterisk (*).
137
How often do inventory updates occur by default?
Daily for mobile devices, weekly for computers.
138
What service does Jamf Pro use to send remote commands?
Apple Push Notification service (APNs).
139
What do advanced searches in Jamf Pro allow?
Searching based on multiple inventory attributes.
140
What does the operator “Like” do in an advanced search?
Finds matches that contain the specified value.
141
How can multiple criteria be grouped in a search?
Using parentheses.
142
What are some common mass actions?
Edit building/department fields, update inventory, set wallpaper, wipe device.
143
What are the two types of device groups in Jamf Pro?
Static groups and smart groups.
144
How is membership managed in static groups?
Manually added or removed.
145
What defines membership in a smart group?
A set of criteria—membership is dynamic.
146
Give an example of a static group.
A classroom cart of iPads or test devices.
147
Give an example of a smart group.
iPads with the latest iOS or Macs without FileVault enabled.
148
Where can group membership be monitored in Jamf Pro?
From the Jamf Pro Dashboard.
149
What does scope define in Jamf Pro?
Which devices receive a management task.
150
What are the three parts of a scope?
Targets, Limitations, Exclusions.
151
What do targets do in a scope?
Define the initial pool of devices.
152
What do limitations do?
Narrow down the target group.
153
What do exclusions do?
Remove devices from the scope—overriding both targets and limitations.
154
What are configuration profiles used for?
To enforce settings on managed devices.
155
Where are installed profiles located on macOS?
General > Device Management in System Settings.
156
What service is used to deploy configuration profiles?
Apple Push Notification service (APNs).
157
What payloads are commonly used in configuration profiles?
Passcode, Restrictions, and Wi-Fi.
158
What does the General payload contain?
Essential information about the configuration profile—it's required.
159
Can you include multiple configurations of the same payload?
Yes, by using the button in the upper-right corner of the payload section.
160
Should unrelated payloads be combined in a single profile?
No—use separate profiles to reduce complexity.
161
What are the two ways to distribute App Store apps in Jamf Pro?
"Make Available in Self Service" and "Install Automatically/Prompt Users to Install."
162
What is managed app distribution?
Jamf Pro controls app behavior and licensing through Apple Business/School Manager.
163
Why use managed distribution?
To deploy apps without user interaction or personal Apple ID use.
164
How does Jamf Pro get app data for deployments?
It syncs with the App Store.
165
Can apps be updated automatically through Jamf Pro?
Yes.
166
What does the Software Updates feature in Jamf Pro allow?
Remote deployment and installation of software updates.
167
Where is the Software Updates feature accessed?
Computers > Software Updates and Devices > Software Updates.
168
What are the three components of an update plan?
Target(s), Action, and Version.
169
What update options are available in an update plan?
Latest major/minor version, specific version, or latest available for each device.
170
Can Jamf Pro install an older version of software?
No.
171
What happens if a device is off during an update plan?
It gets a prompt to install the update when turned on or reconnected.
172
What is a policy in Jamf Pro used for?
To run management tasks on managed Mac computers.
173
What are some common tasks performed with policies?
Installing software, running scripts, adding printers.
174
What tool does Jamf Pro use to run policies?
The jamf binary (does not require APNs).
175
What policy is created by default in Jamf Pro?
Update Inventory.
176
What are the four fundamental components of a policy?
Content, Trigger, Execution Frequency, and Scope.
177
Can policies be added to the Jamf Pro Dashboard?
Yes, for easier monitoring.
178
What happens when you flush a policy log?
The policy can run again at the next trigger.
179
What payload must be configured in all policies?
The General payload.
180
What does the Local Accounts payload do?
Creates, deletes, or resets local user accounts.
181
What does the Maintenance payload do?
Performs tasks like updating inventory, resetting names, flushing caches.
182
Why use caution with frequent inventory updates in policies?
It's a resource-intensive task.
183
What is Jamf Self Service?
An app that gives users access to Jamf Pro assets.
184
How are policies made available in Self Service?
By not setting a trigger and configuring the Self Service settings.
185
What does 'Once per computer' execution frequency mean?
The policy disappears after being run once—until logs are flushed.
186
What does 'Ongoing' frequency mean?
Users can run the policy as many times as needed.
187
What payloads can be used with Self Service policies?
Packages, Printers, Software Updates, Scripts, Restart Options, Files and Processes.
188
What are optional Self Service configurations?
Custom buttons, descriptions, icons, categories, and notifications.
189
What size and format are recommended for Self Service icons?
512x512px in GIF or PNG format.
190
Where is Terminal located on a Mac?
/Applications/Utilities
191
What command shows the manual for another command?
man (e.g., man pwd)
192
What does the jamf binary do?
Handles most Jamf management tasks on a Mac.
193
How do you access the jamf help menu?
jamf help
194
How do you run a jamf command as root?
Use sudo (e.g., sudo jamf policy)
195
What does sudo jamf recon do?
Initiates an inventory update with Jamf Pro.
196
What is a script?
A collection of commands to be run in a specific order.
197
What command opens apps or URLs?
open (e.g., open https://jamf.com or open -a Chess.app)
198
What does the sleep command do?
Pauses execution for a set time (e.g., sleep 5)
199
What is the purpose of #!/bin/bash in a script?
It tells the Mac to use the Bash shell to execute the script.
200
How are comments added to scripts?
With a # symbol.
201
Do scripts run as root when deployed from Jamf Pro?
Yes.
