ACS MacOS & iOS Configuration & Management 3 — Questions and Answers
Question 1: A technician needs to erase and restore multiple iPhones simultaneously using a Mac. Which Apple tool is designed for this task?
- Finder
- Apple Configurator 2 (Correct answer)
- iTunes
- System Image Utility
Correct answer: Apple Configurator 2
Apple Configurator 2 supports bulk erase, restore, and configuration of multiple iOS devices connected via USB simultaneously.
Question 2: On macOS Ventura and later, where are configuration profiles installed by the user or MDM visible for inspection?
- System Settings > Privacy & Security > Profiles (Correct answer)
- Keychain Access > Certificates
- Finder > System Folder > Profiles
- Terminal only
Correct answer: System Settings > Privacy & Security > Profiles
In macOS Ventura (13) and later, installed profiles are visible under System Settings > Privacy & Security > Profiles.
Question 3: Which payload in a configuration profile is used to distribute a Wi-Fi network configuration to iOS devices without users entering the password?
- VPN payload
- Wi-Fi payload (Correct answer)
- Network payload
- Certificate payload
Correct answer: Wi-Fi payload
The Wi-Fi payload in a configuration profile pre-configures SSID, security type, and password so devices join automatically.
Question 4: An organization needs all company iPhones to use a specific DNS server. Which MDM payload achieves this?
- Wi-Fi payload with DNS override
- DNS Settings payload (Correct answer)
- Global HTTP Proxy payload
- Network Relay payload
Correct answer: DNS Settings payload
The DNS Settings payload allows MDM to push custom DNS server addresses and search domains to managed iOS and macOS devices.
Question 5: What is the function of System Integrity Protection (SIP) on macOS?
- Encrypts the startup disk
- Prevents modification of protected system files even by root (Correct answer)
- Blocks unsigned apps from launching
- Manages user account privileges
Correct answer: Prevents modification of protected system files even by root
SIP restricts the root user from modifying protected system directories, processes, and kernel extensions even with administrator privileges.
Question 6: Which Apple service must an organization enroll in to use Automated Device Enrollment (ADE) for Mac and iPhone deployment?
- iCloud Business
- Apple Business Manager or Apple School Manager (Correct answer)
- Apple Developer Program
- Apple Consultants Network
Correct answer: Apple Business Manager or Apple School Manager
ADE requires the organization to be enrolled in Apple Business Manager (for enterprises) or Apple School Manager (for education).
Question 7: A managed Mac shows 'Supervised' status. What additional capability does supervision enable compared to an unsupervised Mac?
- FileVault encryption
- Stricter MDM restrictions such as disabling AirDrop and restricting iCloud features (Correct answer)
- Remote screen viewing
- Time Machine backups
Correct answer: Stricter MDM restrictions such as disabling AirDrop and restricting iCloud features
Supervised Macs (via ADE) support a broader set of MDM restrictions, including disabling AirDrop, iCloud Drive, and content caching controls.
ACS MacOS & iOS Configuration & Management 3
A technician needs to erase and restore multiple iPhones simultaneously using a Mac.
Which Apple tool is designed for this task?