JAMF100 Security and Compliance 1 — Questions and Answers
Question 1: What does the Remote Wipe MDM command do in Jamf Pro?
- Erases all data on a managed device and restores it to factory settings remotely (Correct answer)
- Removes only the MDM management profile without affecting device data
- Wipes only corporate apps and data while leaving personal content intact
- Disables the device remotely without erasing data until physical access is available
Correct answer: Erases all data on a managed device and restores it to factory settings remotely
The Remote Wipe command in Jamf Pro sends an MDM command that completely erases the device and returns it to factory settings, protecting data if the device is lost or stolen.
Question 2: What is Activation Lock in the context of Apple device management?
- An Apple security feature that ties a device to the owner's Apple ID, preventing unauthorized use after a wipe (Correct answer)
- An MDM setting in Jamf Pro that prevents devices from being unenrolled without admin approval
- A physical lock mechanism activated via Jamf Pro when a device is marked as lost
- A Jamf Pro feature that blocks device activation until enrollment is complete
Correct answer: An Apple security feature that ties a device to the owner's Apple ID, preventing unauthorized use after a wipe
Activation Lock is an Apple feature that requires the original Apple ID credentials to reactivate a device after it is erased, which can block IT from redeploying corporate devices.
Question 3: How does Jamf Pro help IT bypass Activation Lock on supervised corporate devices?
- By storing a device-specific Activation Lock Bypass code in the device's Jamf Pro inventory record (Correct answer)
- By contacting Apple Support on behalf of the organization to remove the lock remotely
- By using Apple Business Manager to directly log out the Apple ID linked to the device
- By re-imaging the device using Apple Configurator 2 to skip Activation Lock entirely
Correct answer: By storing a device-specific Activation Lock Bypass code in the device's Jamf Pro inventory record
For supervised devices, Jamf Pro captures an Activation Lock Bypass code that can be used to clear Activation Lock and restore the device without the original Apple ID.
Question 4: What does FileVault management in Jamf Pro provide for macOS devices?
- Enabling FileVault encryption, escrowing recovery keys, and monitoring encryption status (Correct answer)
- Encrypting Jamf Pro policies and configuration profiles in transit to devices
- Managing user passwords for FileVault-protected startup drives
- Providing a backup of encrypted device data in the Jamf Pro server
Correct answer: Enabling FileVault encryption, escrowing recovery keys, and monitoring encryption status
Jamf Pro can enable FileVault via Configuration Profile, automatically escrow the personal recovery key, and report encryption status for all managed Macs.
Question 5: What is Lost Mode in Jamf Pro and which devices support it?
- A remotely activated mode that locks a supervised iOS device and displays a custom message and contact number (Correct answer)
- A Jamf Pro alert mode triggered when a device has not checked in for over 30 days
- A policy that runs automatically when a Mac is reported stolen to remove sensitive data
- A feature available on all managed Apple devices that triggers a loud alarm and locks the screen
Correct answer: A remotely activated mode that locks a supervised iOS device and displays a custom message and contact number
Lost Mode is an MDM command for supervised iOS and iPadOS devices that locks the screen, plays a sound, and displays a custom message to help recover the device.
Question 6: What does the Lock Device MDM command do in Jamf Pro?
- Remotely locks the device screen and optionally sets a six-digit PIN to unlock it (Correct answer)
- Permanently disables the device until it is physically returned to IT
- Removes the user's access to all managed apps without affecting the device passcode
- Triggers a loud alarm on the device to help locate it in the office
Correct answer: Remotely locks the device screen and optionally sets a six-digit PIN to unlock it
The Lock Device command immediately locks the device screen via MDM and can optionally set a numeric PIN that the user must enter to unlock it.
JAMF100 Security and Compliance 1
What does the Remote Wipe MDM command do in Jamf Pro?