Practice Exam Questions 2024 Flashcards
Which two Apple technologies use Bonjour for discovery?
A. SharePlay
B. SharePrint
C. AirPlay
D. AirPrint
E. AirDrop
C. Airplay & D. AirPrint
Which wireless measurement determines the point at which Apple devices scan for roaming candidates?
A. Noise
B. Channel
C. Tx Rate
D. RSSI
D. RSSI (Received Signal Strength Indicator)
Which setting directs app traffic through a network relay for managed iPad devices?
A. Match domains
B. Excluded domains
C. DomainUUID of the relay
D. RelayUUID of the relay
D. RelayUUID of the relay.
Which ports should you open on your router for full Apple Push Notification service functionality?
A. TCP ports 443, 2197, and 5223
B. TCP ports 80, 548, and 5223
C. UDP ports 443, 2197, and 5223
D. UDP ports 80, 548, and 5223
A. TCP ports 443, 2197, and 5223
You’re assisting the network team in troubleshooting an issue in communications with Apple services and APNs.
Which range should you exclude from routing filters to ensure full functionality?
A. 127.0.0.1 - 127.255.255.255
B. 16.0.0.0 - 16.0.0.24
C. 17.0.0.0/8
D. 192.0.0.0/8
C. 17.0.0.0/8
Which setting is required when you use the Global HTTP Proxy payload for automatic proxy configuration?
A. Proxy server URL
B. Proxy type
C. Managed Apple ID user name and password
D. Port
A. Proxy server URL
Which MDM payload can you configure to prioritize traffic using Cisco Fastlane enhanced Quality of Service on Mac computers?
A. Restrictions
B. Wi-Fi
C. VPN
D. Network Usage Rules
B. Wi-Fi
You use MDM to ensure that managed iPhone traffic, destined for your organization domain and subdomains, is tunneled securely.
Which two settings should you configure in the Relay payload?
Select two.
A. RelayUUID
B. Match domains
C. Relays
D. Relay domains
E. Excluded domains
B. Match domains
C. Relays
Mac users received a recently deployed Wi-Fi profile from MDM. They report they can no longer join the 802.1X network.
What is the most likely reason users can no longer join the Wi-Fi network?
A. Trust to the RADIUS server wasn’t established
B. The Wi-Fi network wasn’t configured to auto-join
C. The user accounts are locked
D. Network users forgot their passwords
A. Trust to the RADIUS server wasn’t established
Which protocol should your organization use for Always-On VPN on iPhone and iPad devices?
A. IKEv2
B. L2TP over IPsec
C. SSL VPN
D. Cisco IPsec
A. IKEv2
Which type of 802.1X configuration allows Mac computers to connect to Wi-Fi before login and user authentication after login?
A. System+User Mode
B. System+Login Window Mode
C. User Mode
D. System Mode
B. System+Login Window Mode
In which order do iPhone, iPad, and Mac devices automatically join a Wi-Fi network?
A. Preferred network, public network, private networks
B. Private networks, preferred network, public network
C. Preferred network, private networks, public network
D. Public network, preferred network, pricate networks
C. Preferred network, private networks, public network
Which two content caching settings could you use to optimize internet bandwidth for Apple devices over three network subnets?
Select two.
A. Cache content for: devices using the same public IP address
B. Cache content for: devices using the same local network
C. Cache content for: Only Shared Content
D. Cache content for: devices using custom local networks
E. Cache content for: Only iCloud Content
A. Cache content for: devices using the same public IP address
D. Cache content for: devices using custom local networks
Your Apple devices are configured to send all traffic through an HTTP proxy. The devices aren’t receiving MDM requests.
Which service must be allowed on your network to allow your Apple devices to communicate with your MDM solution?
A. NAT
B. Federated Managed Apple ID
C. APNs
D. SSH
C. APNs
What must be implemented on a network to allow iPad screen monitoring to work with Apple Classroom?
A. Apple School Manager
B. Mobile device management
C. Client-to-client communication
D. Client isolation
C. Client-to-client communication
Which two settings should you confirm are configured on your network to ensure that users get notifications from APNs?
Select two.
A. Allow inbound connections from 17.0.0.0/8 or *apple.com
B. Turn off HTTPS Interception
C. Turn on HTTPS Interception
D. Allow outbound connections to 17.0.0.0/8 or *apple.com
E. Turn on client isolation from 17.0.0.0/8 or *apple.com
A. Allow inbound connections from 17.0.0.0/8 or *apple.com
D. Allow outbound connections to 17.0.0.0/8 or *apple.com
Which type of enrollment results in a Mac that’s managed and unsupervised?
A. Account-driven Device Enrollment
B. Automated Device Enrollment
C. Account-driven User Enrollment
D. Profile-based Device Enrollment
D. Profile-based Device Enrollment
Which two capabilities does Apple’s MDM framework provide on an organization-owned managed device?
Select two.
A. Updating software
B. Remotely wiping or locking
C. Reading SMS messages
D. Reporting user browser history
E. Diagnosing hardware issues
A. Updating software
B. Remotely wiping or locking
Which of these is a reason a user can’t change firewall settings on their organization-owned managed Mac?
A. MDM manages the firewall
B. Gatekeeper manages the firewall
C. XProtect manages the firewall
D. Secure Enclave manages the firewall
A MDM manages the firewall
Which type of declarations isn’t supported in declarative device management?
A. Configurations
B. Enrollments
C. Activations
D. Assets
B. Enrollments
What allows a device to asynchronously apply settings and report status to the MDM solution without constant polling?
A. Apple async notification server
B. Supervision
C. Declarative device management
D. Automated Device Enrollment
C. Declarative device management
You’re resetting several iPad devices for new users. The iPad devices don’t progress past the Apple logo after restart.
Which of these should you do?
A. Get a bypass code from the MDM administrator to clear Activation Lock
B. Send the Return to Service command from the MDM solution
C. Use Apple Configurator for iPhone to restore the iPad devices.
D. Use Apple Configurator for Mac to restore the iPad devices.
D. Use Apple Configurator for Mac to restore the iPad devices.
Your organization buys devices from a new Apple Authorized Reseller. You want to ensure that your devices appear in Apple Business Manager or Apple School Manager.
What information do you need to add in Apple Business Manager or Apple School Manager?
A. Purchase Order Number
B. D-U-N-S Numer
C. Organization ID
D. Reseller Number
D. Reseller Number
Your organization begins buying from a new Apple Authorized Reseller.
What information do you give the reseller to ensure that your devices appear in Apple Business Manager or Apple School Manager?
A. D-U-N-S Number
B. Purchase Order Number
C. Organization ID
D. Reseller Number
C. Organization ID
Your organization wants to prevent devices from being unenrolled from the MDM server.
Which enrollment type can you configure to prevent unenrollment?
A. Automated Device Enrollment
B. Automated User Enrollment
C. Account-driven Device Enrollment
D. Profile-based User Enrollment
A. Automated Device Enrollment
Your Mac is supervised.
Which two enrollment types might have been used to enroll your Mac?
Select two.
A. Declarative-driven Device Enrollment
B. Automated Device Enrollment
C. Account-driven User Enrollment
D. Manual Enrollment
E. Account-driven Device Enrollment
B. Automated Device Enrollment
D. Manual Enrollment
What is required to enroll a device using account-driven Device Enrollment?
A. A Managed Apple ID
B. A Personal Apple ID
C. A passkey
D. An identity provider (IdP)
A. A Managed Apple ID
Which two Apple devices support the Network Usage Rules MDM payload?
Select two.
A. iPhone
B. Mac
C. Apple Watch
D. Apple TV
E. iPad
A. iPhone
E. iPad
Which technology synchronizes local account credentials with an identity provider?
A. Platform SSO
B. Kerberos SSO
C. Active Directory
D. Microsoft Entra ID
A. Platform SSO
Which technology, commonly used for Active Directory or Open Directory, does enterprise single sign-on support in iOS, iPadOS, and macOS?
A. Passkeys
B. Kerberos
C. User-driven password resets
D. Automatic FileVault rotation
B. Kerberos
You’re signed in to your personal Apple ID on your iPhone. You used your managed Apple ID to enroll your iPhone.
What is the result?
A. You’re prompted to sign out of your personal Apple ID
B. An additional iCloud Drive appears in the Files app
C. Your personal iCloud Drive is replaced with your organizational iCloud Drive until you unenroll your iPhone
D. You’re automatically signed out of your personal Apple ID
B. An additional iCloud Drive appears in the Files app
You used account-driven Device Enrollment to enroll your iPhone.
Which two of these data types cryptographically separates organizational and personal data?
Select two.
A. Safari bookmarks
B. Visual Voicemail messages
C. Contacts
D. Calendar
E. Notes
C. Contacts
D. Calendar
Which Content Caching setting caches only operating system and app updates?
A. App and operating system Updates.
B. Only Apple Content
C. Only Shared Content
D. Only operating system Updates and App Content
C. Only Shared Content
You’re resetting the password for the only account on a Mac. FileVault was enabled through MDM.
What do you need from your MDM solution?
A. A FileVault token
B. User name and password of the account that created the MDM server token
C. Personal recovery key
D. Institutional recovery key
D. Institutional recovery key