JAMF100 Configuration Profiles 2 — Questions and Answers
Question 1: What is the Passcode payload used for in a Configuration Profile?
- Enforcing minimum passcode requirements such as length, complexity, and expiration (Correct answer)
- Storing the device passcode in Jamf Pro for admin access
- Setting a temporary passcode for new device setup
- Automatically locking a device after a security incident
Correct answer: Enforcing minimum passcode requirements such as length, complexity, and expiration
The Passcode payload defines minimum security standards for device lock screen credentials, ensuring all managed devices meet organizational compliance requirements.
Question 2: What is the Certificate payload in a Configuration Profile used for?
- Installing trusted certificates for Wi-Fi, VPN, or email authentication (Correct answer)
- Signing Configuration Profiles before deploying them to devices
- Managing App Store developer certificates on managed Macs
- Storing user login credentials securely on the device
Correct answer: Installing trusted certificates for Wi-Fi, VPN, or email authentication
The Certificate payload installs CA or identity certificates on devices, enabling secure authentication to network resources like Wi-Fi using 802.1X or VPN services.
Question 3: What is the difference between a Device-Level and a User-Level Configuration Profile?
- Device-level applies settings for all users on the device; user-level applies only to a specific user account (Correct answer)
- Device-level is for iOS only; user-level is for macOS only
- Device-level is deployed by Jamf Pro; user-level must be installed manually
- Device-level can contain restrictions; user-level can only contain certificates
Correct answer: Device-level applies settings for all users on the device; user-level applies only to a specific user account
Device-level profiles affect the entire device regardless of who is logged in, while user-level profiles apply only to the individual user account they are scoped to.
Question 4: What does the Privacy Preferences Policy Control (PPPC) payload do on macOS?
- Pre-approves privacy permissions for apps to access protected resources without user prompts (Correct answer)
- Sets privacy settings for the user in System Preferences
- Blocks all third-party apps from accessing location services
- Configures Firewall rules based on app privacy requirements
Correct answer: Pre-approves privacy permissions for apps to access protected resources without user prompts
The PPPC payload silently grants or denies apps access to privacy-protected resources — like microphone, camera, or contacts — without requiring the user to click Allow.
Question 5: How are Configuration Profiles distributed to devices in Jamf Pro?
- Via MDM over-the-air using scoped deployment configured in Jamf Pro (Correct answer)
- By emailing the .mobileconfig file to the device user
- By uploading the profile to the App Store for users to download
- By physically connecting the device via USB to the Jamf Pro server
Correct answer: Via MDM over-the-air using scoped deployment configured in Jamf Pro
Jamf Pro pushes Configuration Profiles to devices over-the-air using the MDM protocol, targeting only the devices included in the profile's scope.
Question 6: What is the VPN payload in a Configuration Profile used for?
- Configuring VPN client settings so devices automatically connect to a corporate VPN (Correct answer)
- Setting firewall rules for inbound VPN traffic on managed Macs
- Enabling a device hotspot to share VPN access with other devices
- Restricting devices from connecting to any VPN service
Correct answer: Configuring VPN client settings so devices automatically connect to a corporate VPN
The VPN payload pre-configures VPN connection settings on devices, allowing users to connect to the corporate network without manually entering server details.
JAMF100 Configuration Profiles 2
What is the Passcode payload used for in a Configuration Profile?