CCA CCA User Management and Privileges

Question 1

In Jamf Pro, which feature allows you to bind a Mac to Active Directory so users can log in with their AD credentials?

Accepted Answer

Directory Binding via a Configuration Profile or policy

Answer

LDAP server configuration only

Answer

Local account creation script

Answer

Keychain sync

Question 2

What Jamf Pro management account is automatically created on enrolled Macs and used by the Jamf binary to perform privileged operations?

Accepted Answer

The Jamf management account (often named 'jamfadmin')

Answer

The built-in macOS root account

Answer

The first local admin user

Answer

The MDM enrollment user

Question 3

How does Jamf Pro's 'Local Accounts' policy payload help with user management?

Accepted Answer

It creates, modifies, or deletes local user accounts on managed Macs

Answer

It syncs iCloud accounts to managed Macs

Answer

It enables FileVault for user accounts

Answer

It imports users from Active Directory

Question 4

Which Jamf Pro feature allows you to grant a standard user temporary admin rights for a specified duration without permanently elevating their account?

Accepted Answer

Privilege Escalation via a Self Service policy that grants then revokes admin rights

Answer

Permanently modifying the local account type

Answer

Creating a separate admin account

Answer

Using sudo without a password

Question 5

In Jamf Pro, what is an LDAP server connection used for?

Accepted Answer

Authenticating Jamf Pro users and scoping policies by directory group membership

Answer

Syncing device inventory to Active Directory

Answer

Pushing certificates to managed Macs

Answer

Creating mobile device enrollment profiles

Question 6

What macOS mechanism does Jamf Pro use to enforce that only approved software can be launched by standard users?

Accepted Answer

Gatekeeper + allowed/blocked process policy payloads

Answer

FileVault encryption

Answer

System Integrity Protection

Answer

Parental Controls