JAMF 100 MDM and Apple Services Questions and Answers — Questions and Answers
Question 1: What is the primary function of the Apple Push Notification service (APNs) in the context of Jamf Pro and MDM?
- To store device inventory information and application logs.
- To send a notification to devices, prompting them to check in with the Jamf Pro server for commands. (Correct answer)
- To directly install configuration profiles and applications on managed devices.
- To provide a secure marketplace for purchasing apps and books in volume.
Correct answer: To send a notification to devices, prompting them to check in with the Jamf Pro server for commands.
The Apple Push Notification service (APNs) is the central communication conduit for MDM. Jamf Pro sends a notification to APNs, which then sends a silent push notification to the managed device. This notification tells the device to contact the Jamf Pro server to retrieve and execute any pending commands or profiles. Jamf Pro does not directly communicate with devices for MDM tasks.
Question 2: An administrator is setting up Automated Device Enrollment for the first time. Which of the following is required from Apple Business Manager or Apple School Manager to complete the integration with Jamf Pro?
- A Public Key (.pem) file.
- A Server Token (.p7m) file. (Correct answer)
- An APNs certificate (.p12) file.
- A Supervision Identity certificate.
Correct answer: A Server Token (.p7m) file.
To link Jamf Pro with Apple Business Manager or Apple School Manager for Automated Device Enrollment, you must first upload a public key from Jamf Pro to the Apple portal. In return, you download a Server Token file (.p7m) from Apple and upload it to Jamf Pro. This token authorizes the Jamf Pro server to manage devices associated with your organization.
Question 3: Which Apple service allows an organization to purchase app and book licenses in bulk for distribution through an MDM solution like Jamf Pro?
- Apple Push Notification service (APNs)
- Global Service Exchange (GSX)
- Automated Device Enrollment
- Apps and Books in Apple School Manager or Apple Business Manager (Correct answer)
Correct answer: Apps and Books in Apple School Manager or Apple Business Manager
Apps and Books (formerly known as the Volume Purchase Program or VPP) is the section within Apple School Manager and Apple Business Manager used for acquiring content licenses in volume. Jamf Pro integrates with this service to distribute and manage these licenses for devices and users without requiring individual Apple IDs for each purchase.
Question 4: A user's iPad is not receiving a new configuration profile that was assigned to it in Jamf Pro. The device is powered on, but the user is currently on a network with a firewall that blocks certain ports. Which of the following is the most likely cause of the issue?
- The user has disabled MDM in the device settings.
- The device's APNs certificate has expired.
- The network is blocking communication with the Apple Push Notification service. (Correct answer)
- The Jamf Pro server's SSL certificate is untrusted.
Correct answer: The network is blocking communication with the Apple Push Notification service.
For MDM communication to work, both the Jamf Pro server and the managed device must be able to communicate with the Apple Push Notification service (APNs). If a firewall blocks the necessary ports (like 5223 for clients to APNs), the device will not receive the notification to check in with Jamf Pro, and therefore will not receive any new commands or profiles.
Question 5: Which of the following contains the settings and restrictions, such as Wi-Fi configurations or passcode requirements, that are deployed to Apple devices via MDM?
- A Policy
- A PreStage Enrollment
- A Configuration Profile (Correct answer)
- A Smart Group
Correct answer: A Configuration Profile
Configuration profiles are XML files (.mobileconfig) that contain payloads. These payloads define specific settings and restrictions to be applied to a device. Jamf Pro uses MDM to deploy these profiles to managed devices to enforce organizational settings like Wi-Fi, VPN, passcodes, and restrictions.
Question 6: An organization uses the device-assigned method for distributing apps purchased through Apple's Apps and Books. What is the primary benefit of this method?
- It allows users to keep the apps even after the device is no longer managed.
- It does not require an Apple ID on the device to install the app. (Correct answer)
- It enables users to share app licenses with their personal devices.
- It forces users to enter their password for every app installation for security.
Correct answer: It does not require an Apple ID on the device to install the app.
Device-assigned app distribution, also known as managed distribution, allows Jamf Pro to assign app licenses directly to a device's serial number. This eliminates the need for the end-user to have or use a personal Apple ID to install company-provided applications, streamlining the deployment process.
JAMF 100 MDM and Apple Services Questions and Answers
What is the primary function of the Apple Push Notification service (APNs) in the context of Jamf Pro and MDM?