ECMS Systems Manager and Endpoint Management 2

Question 1

What is Meraki Systems Manager Sentry, and what is its primary purpose?

Accepted Answer

A feature that integrates SM with Meraki MR and MX to enforce network access control based on device compliance status

Answer

A dedicated hardware appliance that provides intrusion prevention for enrolled mobile devices

Answer

A cloud-based SIEM platform that aggregates security events from all SM-enrolled endpoints

Answer

A vulnerability scanner that periodically scans enrolled devices for known CVEs

Question 2

How does Systems Manager Sentry WiFi integration work with Meraki MR access points?

Accepted Answer

SM pushes Wi-Fi credentials to enrolled devices; if a device is non-compliant, it is automatically moved to a restricted SSID via the MR

Answer

SM acts as the RADIUS server for all MR access points, authenticating devices based on their MAC addresses

Answer

MR access points query SM via API to verify device enrollment before issuing a DHCP lease

Answer

SM configures 802.1X supplicant profiles on enrolled devices; the MR then enforces client isolation for non-SM devices

Question 3

An administrator wants to ensure that only SM-enrolled and compliant devices can connect to a corporate SSID on a Meraki MR. Which feature should be configured?

Accepted Answer

Systems Manager Sentry with the SSID set to 'SM Sentry' association requirement

Answer

MAC address allow-listing on the MR SSID

Answer

WPA2-PSK with a complex shared key distributed only to enrolled devices

Answer

Captive portal with Active Directory authentication

Question 4

What type of VPN configuration in Systems Manager allows only traffic from specific applications to traverse the VPN tunnel on an iOS device?

Accepted Answer

Per-app VPN

Answer

Split-tunnel IKEv2 VPN

Answer

Full-tunnel SSL VPN

Answer

Client VPN with traffic selector ACLs

Question 5

How does Systems Manager distribute managed apps to enrolled iOS devices?

Accepted Answer

By pushing App Store apps using Apple Volume Purchase Program (VPP) / Apple Business Manager licenses managed in SM

Answer

By sideloading IPA files directly to devices over the local network via Apple Configurator

Answer

By hosting an internal app repository that devices download apps from using HTTPS

Answer

By using MDX wrapping technology to repackage and sign App Store apps for enterprise distribution

Question 6

Which Systems Manager profile payload type is used to push corporate email account settings automatically to enrolled mobile devices?

Accepted Answer

Exchange ActiveSync (EAS) or email payload

Answer

Network payload

Answer

VPN payload

Answer

Certificate payload

Question 7

What happens to a device's network access when it violates a Systems Manager compliance policy and SM Sentry is configured on the associated MR SSID?

Accepted Answer

The device is disassociated from the corporate SSID or moved to a restricted SSID until compliance is restored

Answer

The device is immediately wiped remotely to prevent data leakage

Answer

The device's VPN certificate is revoked and the MX blocks all VPN traffic from that device

Answer

The administrator receives an email alert but no automatic enforcement action is taken