JAMF 100 JAMF 100 Security and Compliance 3

Question 1

Which Configuration Profile payload restricts iOS device features such as camera use, AirDrop, and Safari browsing?

Accepted Answer

Restrictions payload

Answer

Passcode payload

Answer

Privacy Preferences payload

Answer

Security & Privacy payload

Question 2

What is the primary security advantage of using Jamf Pro PreStage Enrollment with Apple Business Manager?

Accepted Answer

It ensures devices are enrolled in MDM during Setup Assistant so they are managed before the user can use them

Answer

It allows devices to skip MDM enrollment entirely for faster setup

Answer

It removes Activation Lock from all devices in bulk automatically

Answer

It installs all required apps silently before Setup Assistant completes

Question 3

What specific information does Jamf Pro store when a macOS FileVault recovery key is escrowed?

Accepted Answer

The unique individual recovery key for that device's FileVault-encrypted volume

Answer

The device's Apple ID password in hashed form

Answer

The user's login account password encrypted with a master key

Answer

The hardware serial number and firmware encryption key pair

Question 4

How would an administrator use Jamf Pro to enforce a minimum macOS version requirement across managed computers?

Accepted Answer

Use Smart Group criteria to target non-compliant computers, then apply a policy or compliance report

Answer

Create a Restricted Software rule for older OS versions

Answer

Configure a Network Segment to block older OS devices

Answer

Set a minimum OS version in the Distribution Point settings

Question 5

What is the result of sending an 'Erase All Content and Settings' command to a managed iOS device in Jamf Pro?

Accepted Answer

The device is wiped to factory settings and its MDM enrollment is removed

Answer

Only third-party apps and their data are removed from the device

Answer

User data is automatically backed up to iCloud before the device is erased

Answer

The device enters Lost Mode and awaits confirmation before erasing

Question 6

Which Apple service integration enables Jamf Pro to bypass Activation Lock on supervised Apple devices using organizational credentials?

Accepted Answer

Apple Business Manager (ABM) with Device Enrollment (DEP)

Answer

Apple Push Notification Service (APNs)

Answer

Volume Purchase Program (VPP) for app licensing

Answer

Apple School Manager with ClassKit integration

Question 7

Which section of a device's inventory record in Jamf Pro displays current security attributes such as FileVault status, Activation Lock status, and passcode compliance?

Accepted Answer

Security tab

Answer

Applications tab

Answer

Hardware tab

Answer

Extension Attributes tab