ACSP Mobile Device Management (MDM) 4 — Questions and Answers
Question 1: An organization wants to silently install apps on supervised iPhones without user interaction. Which MDM capability enables this?
- App Store managed distribution
- Volume Purchase Program (VPP) managed distribution (Correct answer)
- TestFlight deployment
- Ad hoc provisioning
Correct answer: Volume Purchase Program (VPP) managed distribution
VPP managed distribution allows MDM to silently push apps to supervised devices without requiring user App Store credentials or interaction.
Question 2: What happens to Managed Apps when a device is unenrolled from MDM?
- Apps remain installed but lose their configuration
- Apps are removed automatically if the MDM server is configured to do so (Correct answer)
- Apps convert to personal apps owned by the user
- Apps are moved to a quarantine folder
Correct answer: Apps are removed automatically if the MDM server is configured to do so
When a device unenrolls, the MDM server can be configured to remove managed apps and their associated data automatically.
Question 3: Which supervision method is required to enforce a passcode policy that users cannot bypass on an iPhone?
- Profile-based enrollment only
- Device Enrollment Program (ADE) with supervision (Correct answer)
- Manual configuration profile installation
- Configurator pairing without supervision
Correct answer: Device Enrollment Program (ADE) with supervision
ADE-enrolled supervised devices allow MDM to enforce passcode policies that cannot be removed or bypassed by the user.
Question 4: A technician needs to see all MDM commands queued for a device that is currently offline. Where is this information found?
- The device's Settings > General > VPN & Device Management
- The MDM server's command queue for that device (Correct answer)
- Apple Business Manager device list
- The device's system log via Console app
Correct answer: The MDM server's command queue for that device
The MDM server maintains a command queue per device; commands are delivered when the device reconnects and checks in.
Question 5: Which network protocol does an Apple device use to receive push notifications that trigger it to check in with the MDM server?
- SMTP
- APNs (Apple Push Notification service) (Correct answer)
- XMPP
- WebSockets
Correct answer: APNs (Apple Push Notification service)
MDM relies on APNs to send a lightweight push that prompts the device to contact the MDM server for pending commands.
Question 6: An IT admin wants to prevent users from adding personal Apple Accounts to company-owned iPhones. Which MDM restriction accomplishes this?
- Disable iCloud Keychain
- Restrict 'Allow Adding Personal Apple Accounts' (Correct answer)
- Force Activation Lock
- Disable App Store purchases
Correct answer: Restrict 'Allow Adding Personal Apple Accounts'
The MDM restriction to disallow adding personal Apple Accounts prevents users from signing into iCloud or the App Store with a non-Managed Apple Account.
Question 7: What is the purpose of the 'Remove Management' command sent from an MDM server?
- It erases all device content and settings
- It unenrolls the device from MDM and removes all managed profiles and apps (Correct answer)
- It removes the device from Apple Business Manager
- It disables the device's camera permanently
Correct answer: It unenrolls the device from MDM and removes all managed profiles and apps
The Remove Management command unenrolls the device, stripping managed profiles, payloads, and optionally managed apps without performing a full erase.
ACSP Mobile Device Management (MDM) 4
An organization wants to silently install apps on supervised iPhones without user interaction.
Which MDM capability enables this?