Understanding MDM Flashcards
What links a device to an MDM solution?
A. APNs
B. A firewall
C. A restriction
D. An enrollment profile
D. An enrollment profile
An enrollment profile links a device to the MDM solution.
What does MDM need to operate, specifically for APNs and SSL?
A. Certificates
B. Restrictions
C. Enrollment profiles
A. Certificates
MDM requires multiple certificates to operate, including an APNs certificate to talk to clients and an SSL certificate to communicate securely.
Which Apple device capability allows MDM to secure devices?
A. Location Services
B. Enrollment profiles
C. Built-in device security features
C. Built-in device security features
An MDM solution allows you to use the device’s built-in security features.
How do devices report their status when using declarative device management?
A. Declarations
B. The status channel
C. Profiles
B. The status channel
The status channel is what a device uses to update the MDM server with information about itself.
Which statement about the Apple management framework is true?
A. It’s built into Apple devices.
B. It doesn’t support personal devices.
C. It provides settings created by third parties to manage Apple devices.
A. It’s built into Apple devices.
Each MDM solution uses the built-in Apple management framework in iOS, iPadOS, macOS, and tvOS to manage features and settings for each platform.
After a device has enrolled in an MDM server, what happens next?
A. The device reports status to the server.
B. The device polls the server for any commands.
C. The server sends push notifications to the device.
C. The server sends push notifications to the device.
After a device enrolls in the MDM server, the server sends push notifications to the device when there are commands to process on the device.
What transformative update to the MDM protocol allows a device to react autonomously to its own state changes and apply management logic to itself without cues from the server?
A. User Enrollment
B. Device Assignment
C. Declarative Management
C. Declarative Management
Declarative management allows the device to be autonomous and proactive, freeing up the server to be lightweight, reactive, and able to subscribe to updates without constant polling.
What happens if you install an exclusive payload setting onto a managed Apple device that already contains settings for the same payload?
A. The payload setting will be undefined.
B. The payload setting overwrites the previous setting.
C. The payload setting will be combined and the more restrictive setting will be applied.
B. The payload setting overwrites the previous setting.
Exclusive payloads can have only one possible version of a setting and you can apply this type of setting only once.
When is it recommended to test beta software releases?
A. Quarterly
B. Year-round
C. When new devices are added to your organization
B. Year-round
A modern approach to managing Apple devices involves committing to the latest software, testing year-round, and ensuring that everything works together.
In which type of enrollment and ownership model can users personalize apps and data on their managed devices?
A. BYOD, organization-owned
B. Nonpersonalized, organization-owned
C. Personally enabled, organization-owned
C. Personally enabled, organization-owned
The organization assigns devices to users, and after configuration, users can personalize their devices with their own apps and data.
In which type of ownership model can users personalize apps and data on their personal devices?
A. BYOD, User Enrollment
B. BYOD, organization-owned
C. Nonpersonalized, organization-owned
D. Personally enabled, organization-owned
A. BYOD, User Enrollment
BYOD users can customize their personal devices before and after enrolling them in an MDM solution.
In which ownership model can IT administrators restrict the installed apps and personal data on a device meant to be shared with multiple users?
A. BYOD, User Enrollment
B. BYOD, personally enabled
C. Nonpersonalized, organization-owned
D. Personally enabled, organization-owned
C. Nonpersonalized, organization-owned
IT administrators typically centrally configure and manage shared or single-purpose devices.
How do you enroll devices ineligible for automatic enrollment in Apple Business Manager or Apple School Manager?
A. Device Enrollment
B. Automated Device Enrollment
C. Automatic enrollment
D. No enrollment possible
A. Device Enrollment
You can choose to manually enroll devices in your MDM solution by installing an enrollment profile locally on the devices.
Which type of enrollment is ideal for devices you need to distribute to multiple users in multiple regions?
A. Device Enrollment
B. User Enrollment
C. Automated Device Enrollment
C. Automated Device Enrollment
Automated Device Enrollment is the most convenient choice because you can enroll devices in MDM without physically handling or preparing devices before users receive them.
Which type of enrollment do you commonly use for BYOD deployments?
A. Device
B. User
C. Automated device
B. User
BYOD deployments most commonly employ User Enrollment. You can provide BYOD users a customized URL to an enrollment portal.