JAMF 100 JAMF 100 Security and Compliance

Question 1

Which Jamf Pro feature allows administrators to escrow FileVault recovery keys from managed macOS devices?

Accepted Answer

Configuration Profiles with FileVault payload

Answer

Smart Groups targeting

Answer

Patch Management module

Answer

Restricted Software rules

Question 2

What does Activation Lock on Apple devices prevent?

Accepted Answer

Reactivation of a device without the original Apple ID credentials

Answer

Unauthorized app installations from the App Store

Answer

Access to the iOS Settings app by non-admins

Answer

Installation of MDM configuration profiles

Question 3

In Jamf Pro, where does an administrator initiate a remote wipe command on a managed iOS device?

Accepted Answer

The device's inventory record under Management commands

Answer

Patch Management module

Answer

Smart Groups configuration page

Answer

Configuration Profiles dashboard

Question 4

Which Jamf Pro feature places a supervised iOS device in a locked state that displays a custom message and contact number on the lock screen?

Accepted Answer

Lost Mode

Answer

Remote Lock

Answer

Activation Lock Bypass

Answer

Restricted Mode

Question 5

What macOS security technology verifies application developer signatures and notarization before allowing an app to run?

Accepted Answer

Gatekeeper

Answer

FileVault

Answer

Activation Lock

Answer

System Integrity Protection

Question 6

Which Configuration Profile payload type enforces passcode requirements such as minimum length and complexity on managed iOS devices?

Accepted Answer

Passcode payload

Answer

Restrictions payload

Answer

Security & Privacy payload

Answer

Privacy Preferences payload

Question 7

What action should an administrator take in Jamf Pro to disable Activation Lock on a supervised iOS device being reassigned to a new user?

Accepted Answer

Send a Clear Activation Lock command from the device's management record

Answer

Delete the device from inventory and re-enroll

Answer

Remove the device from all Smart Groups

Answer

Unscope all Configuration Profiles from the device