ACSP Mobile Device Management (MDM) 3

Question 1

What prevents a user from manually removing the MDM enrollment profile from a supervised device enrolled via Automated Device Enrollment?

Accepted Answer

Supervision combined with ADE enrollment

Answer

System Integrity Protection (SIP)

Answer

FileVault encryption

Answer

Gatekeeper policy

Question 2

What is the purpose of a Bootstrap Token in macOS MDM management?

Accepted Answer

To allow the MDM server to unlock FileVault and authorize secure boot operations remotely

Answer

To authenticate the MDM server to Apple

Answer

To validate volume-purchased app licenses

Answer

To establish the initial device enrollment session

Question 3

What happens on a managed Apple device when it receives an APNs push notification from the MDM server?

Accepted Answer

It connects to the MDM server over HTTPS to retrieve and execute pending commands

Answer

It immediately executes the pending MDM command without connecting to the server

Answer

It restarts to apply new configuration profiles

Answer

It sends device diagnostic data to Apple automatically

Question 4

Which configuration profile payload enables VPN tunneling that applies only to specific managed apps rather than all device traffic?

Accepted Answer

Per-App VPN payload

Answer

Global VPN payload

Answer

App Tunnel payload

Answer

Enterprise VPN payload

Question 5

What Apple feature, manageable through Apple Business Manager, replaced the Volume Purchase Program (VPP) for distributing app licenses to managed devices?

Accepted Answer

Apps and Books

Answer

Mac App Store Business Edition

Answer

TestFlight Enterprise

Answer

Enterprise App Catalog

Question 6

What is Declarative Device Management (DDM), introduced by Apple to modernize the MDM protocol?

Accepted Answer

A model where devices autonomously apply and maintain configurations without constant server polling

Answer

A replacement for APNs that uses direct TCP connections

Answer

A new enrollment protocol replacing Automated Device Enrollment

Answer

A real-time remote screen monitoring capability

Question 7

When using Apple Configurator 2 to prepare a fleet of iPhones, which preparatory step makes the most additional MDM management capabilities available?

Accepted Answer

Enabling supervision on the device

Answer

Installing the latest iOS update

Answer

Creating a backup of the device

Answer

Generating a device enrollment profile