MacOS & iOS Configuration & Management Flashcards

Which macOS feature allows administrators to push configuration profiles to enrolled Macs without user interaction?

Answer: Mobile Device Management (MDM)

MDM allows administrators to remotely push configuration profiles, apps, and policies to enrolled macOS devices silently.

On an iPhone enrolled in Apple Business Manager, which activation method prevents the user from removing the MDM profile?

Answer: Automated Device Enrollment (ADE)

Automated Device Enrollment (formerly DEP) locks the MDM profile so it cannot be removed by the user during Setup Assistant.

A macOS administrator wants to restrict users from changing the system date and time. Which tool is most appropriate?

Answer: A configuration profile with Date & Time payload

A configuration profile with the Date & Time payload can enforce NTP servers and lock time-zone settings on managed Macs.

Which command-line tool on macOS is used to install, remove, and list configuration profiles from the command line?

Answer: profiles

The `profiles` command-line tool manages configuration profiles on macOS, allowing install, remove, list, and sync operations.

In Apple Configurator 2, what is the purpose of a 'Blueprint'?

Answer: A reusable set of apps, settings, and profiles applied to devices

A Blueprint in Apple Configurator 2 is a reusable template containing apps, profiles, and settings that can be applied to multiple devices consistently.

What macOS feature, when enabled, requires an administrator password before a user can change system-wide preferences?

Answer: Locked system preferences (padlock)

The padlock icon in System Settings/Preferences locks system-wide preferences panels, requiring admin authentication to make changes.

Which iOS feature allows a single app to run in the foreground and prevents users from exiting to the Home Screen?

Answer: Guided Access

Guided Access locks the device to a single app and can disable hardware buttons, preventing users from switching apps.