Mixed Deck — All JAMF100 Topics Flashcards

What is a Policy trigger in Jamf Pro?

Answer: An event that causes a policy to execute, such as login, startup, or check-in

Policy triggers define when a policy fires — built-in triggers include check-in, startup, login, logout, and enrollment, or a custom event string.

What is the recommended best practice for testing a new script in Jamf Pro before deploying it broadly?

Answer: Scope the policy to a small test group, verify results in the policy logs, then expand scope gradually

Best practice is to scope the policy to a small test group first, verify execution results in the policy logs, and then gradually broaden the scope to limit risk during deployment.

What is the 'Custom Event' trigger used for in Jamf Pro policies?

Answer: Allowing policies to be triggered by a custom string via the jamf binary on the client

Custom Event triggers allow policies to be called by running 'jamf policy -event ' on a managed Mac, enabling script-to-policy chaining and on-demand invocation.

What execution frequency setting causes a Jamf Pro policy to run only once per computer, regardless of how many users log in?

Answer: Once per computer

'Once per computer' ensures the policy runs exactly one time on each computer, tracking by device rather than by user.

What is Declarative Device Management (DDM) and how does Jamf Pro use it?

Answer: A newer Apple MDM framework where devices manage their own state based on declarations from the server

DDM is Apple's evolution of MDM where the server sends declarations (desired state) and devices autonomously ensure they match, reducing round trips and improving reliability.

What is the purpose of the Jamf Pro compliance baseline feature using Extension Attributes and Smart Groups?

Answer: Building a continuous compliance framework that auto-identifies and remediates devices drifting from the security baseline

Extension Attributes gather compliance data (e.g., firewall status, SIP status), Smart Groups identify non-compliant devices, and policies remediate them — creating a self-healing compliance loop.

What is the Exchange payload used for in a Configuration Profile?

Answer: Automatically configuring Microsoft Exchange email accounts on managed devices

The Exchange payload pre-configures corporate email, calendar, and contacts on managed devices by pushing Exchange server credentials and settings silently.

What is a Category in Jamf Pro used for?

Answer: Organizing policies, packages, scripts, and configuration profiles

Categories in Jamf Pro help administrators organize objects like policies and packages for easier navigation and management.

What is the purpose of the Accessibility payload in a Configuration Profile?

Answer: Pre-approving accessibility permissions for apps to control the Mac without user prompts

The Accessibility payload silently grants approved apps the ability to use macOS Accessibility APIs without triggering a user permission dialog.

What does the DNS payload in a Configuration Profile do on macOS?

Answer: Configures DNS-over-HTTPS or DNS-over-TLS settings for encrypted DNS resolution

The DNS payload on macOS configures encrypted DNS (DoH or DoT) resolvers, improving privacy and security for device DNS lookups.

What is the Jamf Pro API primarily used for?

Answer: Programmatically interacting with Jamf Pro to automate tasks and integrations

The Jamf Pro API lets administrators and developers automate workflows, retrieve inventory data, and integrate Jamf Pro with other tools.

What is a signed Configuration Profile?

Answer: A profile with a digital certificate signature that verifies its authenticity and integrity

Signing a Configuration Profile with a certificate ensures that devices can verify the profile has not been tampered with and comes from a trusted source.

What is the purpose of the 'Maintenance' payload in a Jamf Pro policy?

Answer: To perform macOS maintenance tasks like flushing DNS cache and rebuilding the Spotlight index

The Maintenance payload performs common macOS upkeep tasks such as verifying the startup disk, flushing DNS cache, repairing disk permissions, and rebuilding the Spotlight index.

What information is typically configured in a Jamf Pro enrollment invitation?

Answer: A link and instructions for users to enroll their device in Jamf Pro

Enrollment invitations send users a URL and instructions so they can initiate User Initiated Enrollment for their device.

How do you deploy a Mac App Store app to managed devices via Jamf Pro?

Answer: Using Apps and Books (VPP) licenses purchased through Apple Business Manager

Mac App Store apps are deployed in Jamf Pro by purchasing Apps and Books licenses through ABM and then assigning them to devices or users via Jamf Pro.

What is BYOD enrollment in the context of Jamf Pro?

Answer: Enrolling personally owned devices with limited management scope to respect user privacy

BYOD (Bring Your Own Device) enrollment lets employees enroll personal devices while keeping personal data separate and limiting management to work-related configurations.

What is the Clear Passcode command used for on supervised iOS devices in Jamf Pro?

Answer: Removing the current device passcode so the user can set a new one without needing the old code

The Clear Passcode MDM command removes the existing lock screen passcode on supervised iOS devices, allowing a locked-out user to set a new passcode.

What is the VPN payload in a Configuration Profile used for?

Answer: Configuring VPN client settings so devices automatically connect to a corporate VPN

The VPN payload pre-configures VPN connection settings on devices, allowing users to connect to the corporate network without manually entering server details.

What is the purpose of Scope in Jamf Pro policies and profiles?

Answer: Defining exactly which devices, users, or groups a policy or profile targets

Scope determines the target audience for a policy, configuration profile, or app — using computers, users, groups, departments, or buildings.

How can you view a list of all Mac hardware models in your managed fleet in Jamf Pro?

Answer: Using the Hardware/Software Inventory Summary or Computer report filtered by model

The Inventory Summary in Jamf Pro provides counts of managed devices grouped by hardware model, OS version, and other inventory fields.