ACS MacOS & iOS Configuration & Management 2 — Questions and Answers
Question 1: Which macOS feature allows administrators to push configuration profiles to enrolled Macs without user interaction?
- Apple Configurator 2
- Mobile Device Management (MDM) (Correct answer)
- System Preferences sync
- Remote Desktop
Correct answer: Mobile Device Management (MDM)
MDM allows administrators to remotely push configuration profiles, apps, and policies to enrolled macOS devices silently.
Question 2: On an iPhone enrolled in Apple Business Manager, which activation method prevents the user from removing the MDM profile?
- User Enrollment
- Device Enrollment
- Automated Device Enrollment (ADE) (Correct answer)
- Manual profile installation
Correct answer: Automated Device Enrollment (ADE)
Automated Device Enrollment (formerly DEP) locks the MDM profile so it cannot be removed by the user during Setup Assistant.
Question 3: A macOS administrator wants to restrict users from changing the system date and time. Which tool is most appropriate?
- parental controls in System Settings
- A configuration profile with Date & Time payload (Correct answer)
- Terminal chmod on /etc/localtime
- Screen Time restrictions
Correct answer: A configuration profile with Date & Time payload
A configuration profile with the Date & Time payload can enforce NTP servers and lock time-zone settings on managed Macs.
Question 4: Which command-line tool on macOS is used to install, remove, and list configuration profiles from the command line?
- profiles (Correct answer)
- mdmctl
- cfgutil
- networksetup
Correct answer: profiles
The `profiles` command-line tool manages configuration profiles on macOS, allowing install, remove, list, and sync operations.
Question 5: In Apple Configurator 2, what is the purpose of a 'Blueprint'?
- A backup of device data
- A reusable set of apps, settings, and profiles applied to devices (Correct answer)
- A network configuration template for Wi-Fi
- A factory reset procedure
Correct answer: A reusable set of apps, settings, and profiles applied to devices
A Blueprint in Apple Configurator 2 is a reusable template containing apps, profiles, and settings that can be applied to multiple devices consistently.
Question 6: What macOS feature, when enabled, requires an administrator password before a user can change system-wide preferences?
- FileVault
- System Integrity Protection
- Locked system preferences (padlock) (Correct answer)
- Gatekeeper
Correct answer: Locked system preferences (padlock)
The padlock icon in System Settings/Preferences locks system-wide preferences panels, requiring admin authentication to make changes.
Question 7: Which iOS feature allows a single app to run in the foreground and prevents users from exiting to the Home Screen?
- Screen Time App Limits
- Guided Access (Correct answer)
- Kiosk Mode via MDM
- Focus Mode
Correct answer: Guided Access
Guided Access locks the device to a single app and can disable hardware buttons, preventing users from switching apps.
ACS MacOS & iOS Configuration & Management 2
Which macOS feature allows administrators to push configuration profiles to enrolled Macs without user interaction?