CCA User Management and Privileges Flashcards
6 cards from real CCA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CCA User Management and Privileges flashcards as text
In Jamf Pro, which feature allows you to bind a Mac to Active Directory so users can log in with their AD credentials?
Answer: Directory Binding via a Configuration Profile or policy
Jamf Pro can bind Macs to Active Directory using a Directory Binding payload in a Configuration Profile or via a policy, enabling AD login.
What Jamf Pro management account is automatically created on enrolled Macs and used by the Jamf binary to perform privileged operations?
Answer: The Jamf management account (often named 'jamfadmin')
Jamf Pro creates a local management account (typically named 'jamfadmin') with admin privileges on enrolled Macs to perform management tasks.
How does Jamf Pro's 'Local Accounts' policy payload help with user management?
Answer: It creates, modifies, or deletes local user accounts on managed Macs
The Local Accounts policy payload in Jamf Pro lets admins create new local accounts, change passwords, reset home directories, or delete accounts on managed devices.
Which Jamf Pro feature allows you to grant a standard user temporary admin rights for a specified duration without permanently elevating their account?
Answer: Privilege Escalation via a Self Service policy that grants then revokes admin rights
You can build a Self Service policy that temporarily elevates a user to admin and a complementary policy that revokes those rights after a set period.
In Jamf Pro, what is an LDAP server connection used for?
Answer: Authenticating Jamf Pro users and scoping policies by directory group membership
Connecting Jamf Pro to an LDAP server allows admin login via directory credentials and enables scoping of policies/profiles to specific directory groups.
What macOS mechanism does Jamf Pro use to enforce that only approved software can be launched by standard users?
Answer: Gatekeeper + allowed/blocked process policy payloads
Jamf Pro can configure Gatekeeper settings via configuration profiles and use allowed/blocked process payloads in policies to restrict which apps standard users can run.