← All ACSP Flashcard Decks

Mobile Device Management (MDM) Flashcards

7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Mobile Device Management (MDM) flashcards as text
  1. What prevents a user from manually removing the MDM enrollment profile from a supervised device enrolled via Automated Device Enrollment?

    Answer: Supervision combined with ADE enrollment

    Devices that are both supervised and enrolled via ADE have a non-removable MDM profile — users cannot delete the enrollment profile from Settings.

  2. What is the purpose of a Bootstrap Token in macOS MDM management?

    Answer: To allow the MDM server to unlock FileVault and authorize secure boot operations remotely

    The Bootstrap Token is escrowed with the MDM server during enrollment and can be used to remotely unlock FileVault volumes and authorize certain secure operations on managed Macs.

  3. What happens on a managed Apple device when it receives an APNs push notification from the MDM server?

    Answer: It connects to the MDM server over HTTPS to retrieve and execute pending commands

    The APNs notification is only a wake-up signal; the device then opens an HTTPS connection to the MDM server to fetch and execute the actual queued commands.

  4. Which configuration profile payload enables VPN tunneling that applies only to specific managed apps rather than all device traffic?

    Answer: Per-App VPN payload

    The Per-App VPN payload, combined with app management policies, allows specific managed apps to tunnel their traffic through VPN while other apps use the standard connection.

  5. What Apple feature, manageable through Apple Business Manager, replaced the Volume Purchase Program (VPP) for distributing app licenses to managed devices?

    Answer: Apps and Books

    Apps and Books in Apple Business Manager replaced the standalone VPP, allowing organizations to purchase and assign app and book licenses to users and devices via MDM.

  6. What is Declarative Device Management (DDM), introduced by Apple to modernize the MDM protocol?

    Answer: A model where devices autonomously apply and maintain configurations without constant server polling

    DDM shifts the management model so devices proactively apply declared configurations and report status autonomously, reducing the need for repeated MDM server polling and commands.

  7. When using Apple Configurator 2 to prepare a fleet of iPhones, which preparatory step makes the most additional MDM management capabilities available?

    Answer: Enabling supervision on the device

    Supervising a device via Apple Configurator 2 enables the full set of MDM restrictions and commands, including capabilities that are not available on unsupervised devices.