JAMF 100 Device Configuration Profiles Questions and Answers — Questions and Answers
Question 1: An administrator needs to ensure all new corporate iPads automatically connect to the secure Wi-Fi network upon enrollment, without requiring any user interaction. Which payload must be configured within a device configuration profile to achieve this?
- Restrictions
- Passcode
- Wi-Fi (Correct answer)
- VPN
Correct answer: Wi-Fi
The Wi-Fi payload is used to pre-configure wireless network settings, including the SSID (network name), security type, and password. When a device receives a profile with this payload, it can automatically join the specified network.
Question 2: What is the term for a single settings configuration within a larger configuration profile, such as the specific settings for a passcode policy or a single email account?
- Attribute
- Payload (Correct answer)
- Manifest
- Scope
Correct answer: Payload
A configuration profile acts as a container for one or more payloads. Each payload is responsible for configuring a specific setting or service on a device, like Wi-Fi, Restrictions, or Passcode requirements.
Question 3: A Jamf Pro administrator deploys two separate configuration profiles to the same macOS computer. The first profile requires a 6-character simple passcode. The second profile requires an 8-character complex passcode. What will be the effective passcode policy on the computer?
- The 6-character simple passcode policy.
- The user will be prompted to choose which policy to enforce.
- The most restrictive policy, the 8-character complex passcode, will be enforced. (Correct answer)
- Neither policy will apply due to a conflict.
Correct answer: The most restrictive policy, the 8-character complex passcode, will be enforced.
When multiple configuration profiles containing settings for the same payload are applied to a device, Apple's MDM framework will enforce the most restrictive setting. An 8-character complex passcode is more restrictive than a 6-character simple one.
Question 4: An administrator has just finished creating a new configuration profile to disable the camera on a group of iPhones. After clicking 'Save', what is the immediate next step required in the Jamf Pro workflow to assign this profile to the target devices?
- Upload the profile to Apple's Push Notification service (APNs).
- Configure the General payload.
- Click the 'Done' button to finish.
- Define the profile's Scope. (Correct answer)
Correct answer: Define the profile's Scope.
After a configuration profile's payloads are configured and saved, the administrator must define the 'Scope'. The Scope determines which specific computers, mobile devices, users, or groups will receive the profile.
Question 5: An administrator creates a configuration profile using a third-party tool and needs to upload it to Jamf Pro for deployment. What is the standard file extension for this type of file?
- .mobileconfig (Correct answer)
- .plist
- .xml
- .pkg
Correct answer: .mobileconfig
Configuration profiles, whether created in Jamf Pro, Apple Configurator, or another tool, use the .mobileconfig file extension. This extension allows the operating system to recognize the file as a collection of settings to be installed.
Question 6: Which of the following is a primary reason for creating separate configuration profiles for unrelated settings (e.g., one for Wi-Fi and another for Restrictions) instead of combining them into a single profile?
- To reduce the file size of the profile.
- To increase the speed of deployment via APNs.
- To allow for more granular scoping and simplify troubleshooting. (Correct answer)
- To bypass the limit on the number of payloads per profile.
Correct answer: To allow for more granular scoping and simplify troubleshooting.
Separating unrelated payloads into different profiles (e.g., a Wi-Fi profile and a Restrictions profile) is a best practice. This approach allows for greater flexibility in scoping and makes it easier to troubleshoot issues by isolating which set of settings might be causing a problem.
JAMF 100 Device Configuration Profiles Questions and Answers
An administrator needs to ensure all new corporate iPads automatically connect to the secure Wi-Fi network upon enrollment, without requiring any user interaction.
Which payload must be configured within a device configuration profile to achieve this?