Systems Manager and Endpoint Management Flashcards

How does Meraki Systems Manager integrate with Meraki MX appliances to provide VPN access for enrolled devices?

Answer: SM pushes a Client VPN profile with MX credentials to enrolled devices, enabling automatic IKEv2 or L2TP/IPsec VPN connection

Systems Manager can push a Client VPN profile to enrolled devices containing the MX's Client VPN hostname, pre-shared key or certificate, and user credentials, enabling automatic and seamless VPN establishment.

Which Systems Manager feature allows an administrator to remotely view and interact with the screen of an enrolled Android device for troubleshooting?

Answer: Remote Screen (screen share and control)

The Remote Screen feature in Systems Manager allows administrators to view and optionally control the screen of enrolled Android devices directly from the Meraki dashboard, facilitating remote troubleshooting.

What does activating 'Lost Mode' on an enrolled iOS device via Systems Manager accomplish?

Answer: It locks the device, displays a custom message and phone number on the screen, and enables precise GPS location tracking

Lost Mode locks the device immediately, displays a customizable contact message on the lock screen, and enables continuous high-accuracy location tracking via the Meraki dashboard, ideal for locating lost devices.

An organization wants to support BYOD by allowing personal devices to access email but preventing those devices from accessing the internal corporate file shares. Which SM feature supports this scenario?

Answer: Selective wipe combined with per-app VPN to limit corporate app access without managing the entire device

Selective wipe removes only managed corporate data/apps from the device while leaving personal data intact, and per-app VPN can restrict which apps can reach internal resources, making it ideal for BYOD scenarios.

Which Android enrollment method in Systems Manager allows fully managed zero-touch corporate device provisioning without requiring employees to manually install the SM app?

Answer: Android Enterprise zero-touch enrollment (ZTE) with a DPC identifier

Android Enterprise zero-touch enrollment (ZTE) allows corporate Android devices to be pre-configured in the zero-touch portal with Meraki SM as the Device Policy Controller (DPC), so devices automatically enroll during initial setup.

What SM feature provides a hardware and software inventory of enrolled endpoints, including installed applications, OS version, and device hardware specifications?

Answer: The SM device details page and inventory report, populated automatically by the SM agent

The Systems Manager agent running on enrolled endpoints regularly reports hardware specs, OS version, and installed application inventory to the Meraki dashboard, making it accessible on the device details page and exportable as inventory reports.

When deploying Meraki Systems Manager in an environment with both iOS and Windows endpoints, which enrollment approach is supported for Windows devices?

Answer: Windows devices are enrolled using the SM Windows agent installer, which can be deployed via GPO, Intune, or manual install

Windows devices are enrolled by installing the Meraki SM Windows agent, which can be deployed via Group Policy (GPO), Microsoft Intune, SCCM, or manually, after which the device appears in the SM dashboard for management.