JAMF 100 Device Enrollment Methods Questions and Answers — Questions and Answers
Question 1: An organization is deploying new, corporate-owned iPhones and wants to ensure they are supervised and that the MDM profile cannot be removed by the user. Which enrollment method should be used to achieve this?
- User Enrollment
- Automated Device Enrollment (Correct answer)
- Device Enrollment via URL
- On-device Enrollment with a package
Correct answer: Automated Device Enrollment
Automated Device Enrollment is the only method that enables zero-touch deployment with mandatory, non-removable MDM profiles and supervision for institutionally owned devices right out of the box.
Question 2: A company has several existing Mac computers that were purchased from a retail store and are not in Apple Business Manager. The IT department needs to manage these devices with Jamf Pro without erasing them. What is the most suitable enrollment method?
- Automated Device Enrollment
- User Enrollment
- User-Initiated Enrollment (Correct answer)
- Enrollment via Apple Configurator
Correct answer: User-Initiated Enrollment
User-Initiated Enrollment (also known as Device Enrollment via URL) is designed for devices that are already in use and not part of Apple Business Manager or Apple School Manager. This method allows for enrollment without wiping the device.
Question 3: Which of the following is a primary characteristic of User Enrollment, specifically designed for personally owned (BYOD) iOS and iPadOS devices?
- It provides the administrator with full device wipe capabilities.
- It creates a separate, managed APFS volume for corporate data and apps. (Correct answer)
- The MDM profile is non-removable by the user.
- It requires the device's serial number to be in Apple Business Manager.
Correct answer: It creates a separate, managed APFS volume for corporate data and apps.
User Enrollment is designed for BYOD scenarios and prioritizes user privacy by creating a separate APFS volume for managed apps and data. This allows an administrator to remove corporate data without affecting the user's personal information.
Question 4: When configuring an Automated Device Enrollment workflow, what is the purpose of a PreStage Enrollment in Jamf Pro?
- To purchase and assign Apps and Books licenses to devices before they enroll.
- To retroactively apply a non-removable MDM profile to already-enrolled devices.
- To define the Setup Assistant experience and apply initial configurations to devices. (Correct answer)
- To generate the unique URL required for User-Initiated Enrollment.
Correct answer: To define the Setup Assistant experience and apply initial configurations to devices.
A PreStage Enrollment in Jamf Pro is used to customize the settings for devices enrolling via Automated Device Enrollment. This includes skipping Setup Assistant steps, enforcing MDM profile installation, and applying initial configurations like packages or profiles.
Question 5: A user is enrolling their personally-owned iPhone using the User-Initiated Enrollment URL. After they authenticate on the enrollment webpage, what is the immediate next step they must perform on their device?
- Enter their Apple ID password to authorize management.
- Restart the device to apply the settings.
- Open the Self Service app to complete the process.
- Download and explicitly install the MDM profile in the Settings app. (Correct answer)
Correct answer: Download and explicitly install the MDM profile in the Settings app.
For User-Initiated Enrollment on iOS/iPadOS, after authenticating via the enrollment URL, the user is prompted to download a configuration profile. They must then navigate to the Settings app to manually review and install the profile to complete the enrollment.
Question 6: Which statement accurately describes a key difference between Automated Device Enrollment and User-Initiated Enrollment for a macOS device?
- Only Automated Device Enrollment can install configuration profiles.
- The MDM profile from Automated Device Enrollment is non-removable, while the profile from User-Initiated Enrollment is removable. (Correct answer)
- User-Initiated Enrollment requires the device to be wiped, while Automated Device Enrollment does not.
- Only User-Initiated Enrollment can be performed on a brand new, out-of-the-box computer.
Correct answer: The MDM profile from Automated Device Enrollment is non-removable, while the profile from User-Initiated Enrollment is removable.
A fundamental advantage of Automated Device Enrollment is that the MDM profile is mandatory and cannot be removed by the user. In contrast, devices enrolled via User-Initiated Enrollment have a removable MDM profile, which the user can delete at any time.
JAMF 100 Device Enrollment Methods Questions and Answers
An organization is deploying new, corporate-owned iPhones and wants to ensure they are supervised and that the MDM profile cannot be removed by the user.
Which enrollment method should be used to achieve this?