Managing Data Flashcards
What do you use on a managed, user-owned iPhone or iPad to prevent users from opening unmanaged attachments or documents in managed sources?
A. A restriction
B. A managed domain
C. A managed account
A. A restriction
Open In management uses a set of restrictions to prevent users from opening attachments or documents from managed sources in unmanaged destinations on a managed iPhone or iPad.
What do you use on a managed, user-owned iPhone to prevent managed apps from storing data in iCloud?
A. A restriction
B. A managed domain
C. A managed account
A. A restriction
You can use your MDM solution to push a restriction to your managed devices to keep managed app data from being backed up to iTunes and iCloud.
Which condition applies when a Managed Pasteboard restriction is installed on a managed device?
A. The Paste button is dimmed.
B. The Paste button doesn’t appear.
C. A “Paste Not Allowed” notification displays.
C. A “Paste Not Allowed” notification displays.
If the user isn’t allowed to paste content in an app due to the restriction, they get a “Paste Not Allowed” notification that includes the organization name.
Which apps can users use to open the email attachment in the organization account after Managed Open In restrictions are in place?
A. Only apps that the user installs
B. Any app installed on the device
C. Only apps installed from the App Store
D. Only managed apps that the MDM solution installs
D. Only managed apps that the MDM solution installs
Apps that the MDM solution installs are considered managed. You can apply restrictions to managed apps that limit how users can share attachments with unmanaged apps.
Where can you confirm whether iCloud restrictions are active in a managed Mac?
A. In iCloud Keychain in Keychain Access
B. In System Settings > Privacy & Security
C. In Restrictions in System Information
D. In About This Mac in the Apple menu
B. In System Settings > Privacy & Security
After you’ve used MDM to push restrictions to your devices, the profile displays those restrictions. Using System Settings, you can review the restrictions by choosing the profile containing them.
Which type of payload do you use to prevent a user from removing system apps on iPhone?
A. Restrictions
B. Privacy & Security
C. Software Updates
A. Restrictions
Use a Restrictions payload to prevent users from removing system apps on iPhone.
Where on a Mac with macOS 13.0 or later do you access the options to configure Gatekeeper?
A. In System Settings > General, below Security settings.
B. In System Settings > Control Center, below Security settings.
C. In System Preferences > Security & Privacy, in the General tab.
D. In System Settings > Privacy & Security, below Security settings.
D. In System Settings > Privacy & Security, below Security settings.
In macOS 13.0 or later you configure Gatekeeper below Security settings in System Settings > Privacy & Security.
You apply an MDM payload to prevent users from installing apps from the App Store to a device.
Which types of apps are still available to download to the device?
A. Games and Reader apps
B. All free apps that don’t have in-app purchases
C. Managed apps, MDM-installed apps, system apps, and updates to those apps
C. Managed apps, MDM-installed apps, system apps, and updates to those apps
The device can still receive managed apps, MDM-installed apps, system apps, and updates to those apps despite restrictions on access to the App Store.
What is a benefit of enabling FileVault on a Mac startup volume?
A. Additional security by requiring a login password to decrypt data
B. Increased encryption by increasing the number of bits in the key from 0 to 128
C. Enhanced privacy by encrypting all data sent over a Mac computer’s network connections
A. Additional security by requiring a login password to decrypt data
On Mac computers with Apple silicon or the T2 chip, data is always encrypted on the startup volume. Turning on FileVault provides additional security by requiring a login password to decrypt data.
What is the purpose of a PRK?
A. To initiate an “Erase All Content and Settings” command
B. To unlock the startup disk if the user forgets their login password
C. To authorize the installation of macOS software updates and upgrades
B. To unlock the startup disk if the user forgets their login password
When you first turn on FileVault on an individual unmanaged Mac, you choose how you want to unlock the startup disk if the user forgets their login password: with the Apple ID they use for iCloud or with a PRK.
When managing FileVault using MDM, which of the following is required?
A. The managed Mac must be supervised.
B. An IRK must be installed on the managed Mac.
C. A user must log in on the managed Mac using an administrator account.
A. The managed Mac must be supervised.
You can manage FileVault settings on Mac computers that are enrolled in and supervised by your MDM solution, using either Automated Device Enrollment or Device Enrollment.
