JAMF100 Security and Compliance

Question 1

What does the Remote Wipe MDM command do in Jamf Pro?

Accepted Answer

Erases all data on a managed device and restores it to factory settings remotely

Answer

Removes only the MDM management profile without affecting device data

Answer

Wipes only corporate apps and data while leaving personal content intact

Answer

Disables the device remotely without erasing data until physical access is available

Question 2

What is Activation Lock in the context of Apple device management?

Accepted Answer

An Apple security feature that ties a device to the owner's Apple ID, preventing unauthorized use after a wipe

Answer

An MDM setting in Jamf Pro that prevents devices from being unenrolled without admin approval

Answer

A physical lock mechanism activated via Jamf Pro when a device is marked as lost

Answer

A Jamf Pro feature that blocks device activation until enrollment is complete

Question 3

How does Jamf Pro help IT bypass Activation Lock on supervised corporate devices?

Accepted Answer

By storing a device-specific Activation Lock Bypass code in the device's Jamf Pro inventory record

Answer

By contacting Apple Support on behalf of the organization to remove the lock remotely

Answer

By using Apple Business Manager to directly log out the Apple ID linked to the device

Answer

By re-imaging the device using Apple Configurator 2 to skip Activation Lock entirely

Question 4

What does FileVault management in Jamf Pro provide for macOS devices?

Accepted Answer

Enabling FileVault encryption, escrowing recovery keys, and monitoring encryption status

Answer

Encrypting Jamf Pro policies and configuration profiles in transit to devices

Answer

Managing user passwords for FileVault-protected startup drives

Answer

Providing a backup of encrypted device data in the Jamf Pro server

Question 5

What is Lost Mode in Jamf Pro and which devices support it?

Accepted Answer

A remotely activated mode that locks a supervised iOS device and displays a custom message and contact number

Answer

A Jamf Pro alert mode triggered when a device has not checked in for over 30 days

Answer

A policy that runs automatically when a Mac is reported stolen to remove sensitive data

Answer

A feature available on all managed Apple devices that triggers a loud alarm and locks the screen

Question 6

What does the Lock Device MDM command do in Jamf Pro?

Accepted Answer

Remotely locks the device screen and optionally sets a six-digit PIN to unlock it

Answer

Permanently disables the device until it is physically returned to IT

Answer

Removes the user's access to all managed apps without affecting the device passcode

Answer

Triggers a loud alarm on the device to help locate it in the office