ACSP Network Services Management 2

Question 1

What is Apple Business Manager (ABM) and what does it provide for enterprise Mac deployment?

Accepted Answer

ABM is Apple's web portal for business that enables Automated Device Enrollment (ADE), Volume Purchase Program (VPP), and Managed Apple IDs for enterprise Mac management

Answer

Apple Business Manager is a web-based portal that enables: Automated Device Enrollment (ADE/DEP) for zero-touch MDM enrollment, Volume Purchase Program for bulk app and book purchasing, and Managed Apple IDs for organizational accounts separate from personal Apple IDs.

Question 2

What is MDM (Mobile Device Management) enrollment and what types are supported on macOS?

Accepted Answer

MDM enrollment registers a Mac with a management server; types include Automated Enrollment (via ADE/ABM), User Enrollment, and Device Enrollment (profile-based)

Answer

macOS MDM enrollment types: Automated Device Enrollment (ADE, via ABM — supervisor-level, cannot be removed by user), Device Enrollment (user installs profile — can be removed), and User Enrollment (privacy-preserving BYOD enrollment that separates personal/managed data).

Question 3

What macOS feature allows administrators to distribute configuration profiles, and what can these profiles configure?

Accepted Answer

Configuration profiles (.mobileconfig files) are XML-based files that configure Wi-Fi, VPN, email accounts, certificates, restrictions, and many system settings, distributed via MDM or manual installation

Answer

Configuration profiles are XML-based .mobileconfig files that can configure virtually any manageable macOS setting including Wi-Fi, VPN, email/calendar accounts, certificates, passcode policies, system restrictions, app configurations, and security settings.

Question 4

What is the purpose of a Certificate Authority (CA) certificate and why would a company need to install one on managed Macs?

Accepted Answer

A CA certificate establishes trust in the company's own certificate infrastructure, allowing Macs to trust internal HTTPS sites, VPNs, and network authentication without security warnings

Answer

A root CA certificate, when installed on managed Macs, makes macOS trust all certificates signed by that CA. Companies install their internal CA to enable trusted HTTPS for internal web apps, WPA2-Enterprise Wi-Fi authentication, and VPN certificate authentication without browser warnings.

Question 5

How does macOS directory services integration with Active Directory work for user authentication?

Accepted Answer

Macs can join an Active Directory domain via System Settings > Users & Groups > Login Options, allowing AD users to authenticate with their domain credentials

Answer

macOS has built-in Active Directory (AD) integration. Macs can join an AD domain through System Settings > Users & Groups > Login Options > Join, or via the Terminal command 'dsconfigad'. Once joined, AD users can log in to the Mac using their domain username and password.

ACSP - Apple Certified Support Professional Practice Test

ACSP - Apple Certified Support Professional Practice Test

ACSP Network Services Management 2