Manage macOS updates with Mobile Device Management (MDM)

Question 1

____ is an update to the existing protocol for device management that can be used in combination with the existing MDM protocol capabilities. It allows the device to asynchronously apply settings and report status back to the MDM solution without constant polling. This is ideal for performance and scalability.

Answer 1

Declarative Device Management

Question 2

in which iOS and macOS versions can MDM solutions enforce a minimum operating system version during Automated Device Enrollment?

Answer 2

iOS 17 and macOS 14

Question 3

When deffering software updates

Organizations can specify a custom deferral period from 1 to ____ days

Answer 3

90

Question 4

OTA (Over the air) software updates are typically available for up to ____ days after their initial release date to ensure that an update is always available for managed devices with the maximum deferral value.

Answer 4

180

Question 5

In addition to defining time-based deferrals, organizations can define whether users on supervised iPhone and iPad devices have the option to upgrade to a newer, major version or continue on the current one and still receive minor updates, even after an upgrade is available.

A. True
B. False

Answer 5

A. True

For example, on an iPhone using iOS 17.6, one of three options can be used:

• Offer users only additional updates to iOS 17.
• Offer users only the upgrade to iOS 18.
• Allow users the choice: additional updates to iOS 17 (for example, iOS 17.7) or upgrade to iOS 18.

Question 6

When setting up configuration for Automatic software updates, when Automatic update installations are turned on, this option does not require automatic downloads to be turned on

A. True
B. False

Answer 6

B. False

When Automatic update installations are turned on, this option requires automatic downloads to be turned on.

Question 7

What are the three configuration choices that are available for downloading and preparing automatic software updates?

Answer 7

• Let the user choose whether to turn on automatic downloads.
• Automatic update downloads are turned off.
• Automatic update downloads are turned on.

Question 8

____ lists most Apple and third-party software that has been installed manually or automatically.

Answer 8

System Information

Question 9

How can you view recently installed background updates?

Answer 9

1. Press and hold the Option key while choosing Apple menu > System Information.
2. From the Software section of the sidebar, select Installations.
3. Click the Install Date column on the right to sort the list by date.

Question 10

What are the three different types of background updates?

Answer 10

Rapid Security Responses, security-configuration updates, and system data files

Question 11

____ updates help make your Mac more secure by identifying malicious software and preventing its installation

Answer 11

Security-configuration

When you restart your Mac, these updates also remove any malicious software that is identified but already installed

Question 12

What are the different security-configuration updates that are installed in the background?

Answer 12

• Core Services Application Configuration Data: Blocks incompatible apps from being launched
• EFICheck AllowListAll: Verifies that Apple provided the firmware for your Mac
• Gatekeeper Configuration Data: Helps protect your Mac from apps created by unidentified developers
• Incompatible Kernel Extension Configuration Data: Blocks incompatible kernel extensions that may adversely affect your Mac
• XProtectPayloadsConfigData: Removes known malware
• TCC Configuration Data: Improves compatibility of specified software with macOS security features
• XProtectPlistConfigData: Prevents known malware from running

Question 13

____ files provide new word lists, speech-recognition assets, voice assets, better suggestions for contacts and events, and more

Answer 13

System data

Some system data files are installed only when you turn on or use features that require them

Question 14

Organizations can define whether Rapid Security Responses are automatically applied and specify whether users are allowed to remove them after they’ve been applied

A. True
B. False

Answer 14

A. True

Question 15

When enforcing software updates

The enforcement date and time are not relative to the local time zone of the device

A. True
B. False

Answer 15

B. False

For example, if the enforcement date is set to 6 p.m., devices attempt to perform the update at 6 p.m. on the specified date in their local time zone

Question 16

When a software update is declared, where are users informed about its deadline?

Answer 16

• In Settings (iOS and iPadOS) and in System Settings (macOS)
• In a notification

Question 17

To help ensure that enforced Software Update installation notifications are displayed to the user, the Do Not Disturb feature is ignored during the 24 hours prior to the enforcement

A. True
B. False

Answer 17

A. True

Question 18

In case the user hasn’t installed the enforced software update before the local enforcement date, what scenarios will happen?

Answer 18

• iOS and iPadOS force the user to enter their passcode if one is set (unless it was entered earlier)
• macOS force quits all open apps (regardless of whether any documents are open and unsaved) and performs a restart if necessary
• On a Mac with Apple silicon, the Mac uses a bootstrap token (if one is available) to authorize the update or the Mac prompts the user for their credentials

Question 19

Using ____ available with declarative device management, MDM solutions can also get increased transparency about the status of the installation—for example, waiting for, downloading and preparing, or installing the update

Answer 19

status reports

Question 20

To install an update on Shared iPad, users must be signed out but can be left cached on the device. If the installation requires more free space than what is currently available, cached user account data cannot be removed

A. True
B. False

Answer 20

B. False

Cached user account data must be removed

Question 21

Updates and upgrades to iPadOS on Shared iPad can be initiated only by what means?

Answer 21

• The mobile device management (MDM) solution that the Shared iPad is enrolled in
• When physically connected to a Mac using Apple Configurator for Mac
• When physically connected to a Mac using the Finder

Updates to apps on Shared iPad can be initiated only by the MDM solution that the Shared iPad is enrolled in.

Question 22

If you use your Mobile Device Management (MDM) solution to upgrade a Shared iPad to iPadOS 17, the upgrade won’t install if there are existing user accounts on the iPad

A. True
B. False

Answer 22

A. True

use your MDM solution to remove the existing users from the iPad before you upgrade, or use the Finder or Apple Configurator on a Mac to erase the iPad before you upgrade

Question 23

What MDM solution command can you use to remove users of a Shared iPad?

Answer 23

DeleteUser