ACSP Mobile Device Management (MDM) 2 — Questions and Answers
Question 1: What payload type is used in a configuration profile to configure Wi-Fi network settings on managed Apple devices?
- com.apple.wifi.managed (Correct answer)
- com.apple.network.eap
- com.apple.networkextension
- com.apple.wifi.settings
Correct answer: com.apple.wifi.managed
The com.apple.wifi.managed payload configures Wi-Fi network settings, including SSID, security type, and credentials, within a configuration profile.
Question 2: Which Apple tool provides a graphical interface for creating, signing, and installing configuration profiles and managing supervised Apple devices?
- Apple Configurator 2 (Correct answer)
- System Preferences
- Profile Manager
- Xcode Instruments
Correct answer: Apple Configurator 2
Apple Configurator 2 is a free macOS app that lets administrators prepare, supervise, and manage Apple devices and configuration profiles without a full MDM server.
Question 3: What MDM command allows an administrator to erase all data and settings on a lost or stolen corporate device remotely?
- Remote Lock
- Remote Wipe (Erase Device) (Correct answer)
- Device Quarantine
- Managed Reset
Correct answer: Remote Wipe (Erase Device)
The Remote Wipe MDM command sends an erase instruction to the device, which wipes all data and returns the device to factory settings regardless of its location.
Question 4: What certificate must an MDM server possess to communicate with Apple Push Notification service on behalf of enrolled devices?
- SSL/TLS certificate
- MDM Push Certificate (Correct answer)
- Enterprise Distribution Certificate
- Developer Certificate
Correct answer: MDM Push Certificate
An MDM Push Certificate, obtained from Apple through the Apple Push Certificates Portal, is required for the MDM server to send APNs notifications to enrolled devices.
Question 5: How many Exchange ActiveSync accounts can a single Exchange payload in a configuration profile configure?
- 1 (Correct answer)
- 5
- 10
- Unlimited
Correct answer: 1
Each Exchange payload in a configuration profile configures exactly one Exchange account; multiple accounts require multiple Exchange payloads within the profile.
Question 6: In Apple Business Manager, what feature allows administrators to link devices to a specific MDM server before the device is unboxed?
- Device Assignment in ABM (Correct answer)
- Manual enrollment link
- Profile sideloading
- Certificate pinning
Correct answer: Device Assignment in ABM
In Apple Business Manager, Device Assignment lets administrators assign devices to an MDM server, so when the device is activated it automatically enrolls without any manual steps.
Question 7: What MDM restriction key, when set to false, prevents users on a managed device from adding or modifying accounts such as Apple IDs and email accounts?
- allowAccountModification (Correct answer)
- allowAppleIDCreation
- restrictAccountChanges
- lockAppleID
Correct answer: allowAccountModification
Setting allowAccountModification to false in a Restrictions payload prevents users from adding, removing, or modifying any accounts in Settings, including Apple IDs and mail accounts.
ACSP Mobile Device Management (MDM) 2
What payload type is used in a configuration profile to configure Wi-Fi network settings on managed Apple devices?