ACSP Mobile Device Management (MDM) 1 — Questions and Answers
Question 1: What service does Apple MDM rely on to notify enrolled devices that the MDM server has pending commands?
- Apple Push Notification service (APNs) (Correct answer)
- LDAP over TLS
- SSH tunneling
- FTP with SSL
Correct answer: Apple Push Notification service (APNs)
Apple MDM uses APNs to push a wake-up signal to devices, prompting them to connect to the MDM server and retrieve pending commands.
Question 2: Which enrollment method allows corporate-owned Apple devices to automatically enroll in MDM during first-time setup, with no user interaction required?
- User Enrollment
- Automated Device Enrollment (ADE) via Apple Business Manager (Correct answer)
- Manual profile installation
- Apple Configurator USB enrollment
Correct answer: Automated Device Enrollment (ADE) via Apple Business Manager
ADE via Apple Business Manager enables zero-touch enrollment by linking devices to an MDM server before the device ever reaches the end user.
Question 3: Which Apple program allows organizations to purchase and distribute apps in bulk to managed Apple devices?
- Apple Developer Program
- TestFlight
- Apple Business Manager (ABM) (Correct answer)
- App Store Connect
Correct answer: Apple Business Manager (ABM)
Apple Business Manager provides the Apps and Books feature (formerly VPP) that lets organizations purchase app licenses in volume and distribute them to managed devices.
Question 4: Which MDM enrollment type is designed for personally-owned (BYOD) devices and separates personal data from managed work content?
- Device Enrollment
- Automated Device Enrollment
- User Enrollment (Correct answer)
- Supervised Enrollment
Correct answer: User Enrollment
User Enrollment creates a managed Apple ID–based enrollment that cryptographically separates work data from personal data, preserving employee privacy on BYOD devices.
Question 5: What file extension is used for MDM configuration profile files distributed to Apple devices?
- .plist
- .mobileconfig (Correct answer)
- .xml
- .profile
Correct answer: .mobileconfig
Configuration profiles use the .mobileconfig extension and are structured XML files signed and delivered to Apple devices via MDM, email, or web download.
Question 6: What supervision level on iPhone and iPad enables the broadest set of MDM restrictions and management capabilities?
- Basic enrollment
- User Enrollment
- Supervised mode (Correct answer)
- Standard management
Correct answer: Supervised mode
Supervised mode, typically set through ADE or Apple Configurator 2, unlocks additional MDM restrictions and management commands not available on unsupervised devices.
Question 7: Which macOS command-line tool is used to install, remove, and list configuration profiles on a Mac?
- profiles (Correct answer)
- mdmctl
- configutil
- pfctl
Correct answer: profiles
The `profiles` command-line tool on macOS manages configuration profiles, allowing admins to install, remove, list, and verify profiles from the Terminal.
ACSP Mobile Device Management (MDM) 1
What service does Apple MDM rely on to notify enrolled devices that the MDM server has pending commands?