JAMF 100 JAMF 100 Security and Compliance 3

Question 1

Which Configuration Profile payload restricts iOS device features such as camera use, AirDrop, and Safari browsing?

Accepted Answer

Restrictions payload

Answer

The Restrictions payload in an iOS Configuration Profile allows administrators to disable specific built-in features and applications.

Question 2

What is the primary security advantage of using Jamf Pro PreStage Enrollment with Apple Business Manager?

Accepted Answer

It ensures devices are enrolled in MDM during Setup Assistant so they are managed before the user can use them

Answer

PreStage Enrollment enrolls devices in MDM during Apple's Setup Assistant, ensuring the device is managed from first use and cannot be set up unmanaged.

Question 3

What specific information does Jamf Pro store when a macOS FileVault recovery key is escrowed?

Accepted Answer

The unique individual recovery key for that device's FileVault-encrypted volume

Answer

Jamf Pro escrows the unique per-device recovery key that can decrypt the specific macOS FileVault volume if the user password is lost.

Question 4

How would an administrator use Jamf Pro to enforce a minimum macOS version requirement across managed computers?

Accepted Answer

Use Smart Group criteria to target non-compliant computers, then apply a policy or compliance report

Answer

Smart Groups can target computers below a minimum OS version using inventory criteria, and policies or compliance reports can then remediate or report on those devices.

Question 5

What is the result of sending an 'Erase All Content and Settings' command to a managed iOS device in Jamf Pro?

Accepted Answer

The device is wiped to factory settings and its MDM enrollment is removed

Answer

The Erase All Content and Settings command wipes the iOS device completely to factory defaults, removing all data and MDM enrollment.

JAMF 100 Exam Practice Test

JAMF 100 Exam Practice Test

JAMF 100 JAMF 100 Security and Compliance 3