CCT Troubleshooting & Maintenance 3 — Questions and Answers
Question 1: A technician needs to troubleshoot why a specific package is not installing via a Jamf policy. Which log provides the most granular installation details?
- /var/log/install.log (Correct answer)
- /Library/Logs/jamf.log
- /var/log/system.log
- /private/var/log/asl.log
Correct answer: /var/log/install.log
The /var/log/install.log captures package installer output including errors from the macOS installer subsystem.
Question 2: A Casper-managed device is not receiving push notifications. Which Apple service should be verified as reachable?
- Apple Software Update servers
- Apple Push Notification service (APNs) on port 2195/5223 (Correct answer)
- iCloud Drive sync service
- Apple Business Manager enrollment portal
Correct answer: Apple Push Notification service (APNs) on port 2195/5223
APNs on ports 2195 and 5223 must be reachable for Jamf Pro to deliver real-time push commands to devices.
Question 3: During a routine maintenance window, a technician must verify that all Casper management binaries are current. Which command confirms the installed Jamf binary version?
- jamf -version (Correct answer)
- jamf checkJSSConnection
- jamf version --verbose
- jamf about
Correct answer: jamf -version
Running 'jamf -version' in Terminal outputs the current version of the installed Jamf management binary.
Question 4: A Casper policy set to run 'Once per computer' is repeatedly re-running after each manual flush. What is the most likely cause?
- The policy trigger is set to 'recurring check-in'
- Policy logs were flushed, resetting the execution receipt (Correct answer)
- The device clock is out of sync
- The Jamf binary is running as the wrong user
Correct answer: Policy logs were flushed, resetting the execution receipt
Flushing policy logs removes the execution receipt that Jamf uses to enforce 'Once per computer' frequency, allowing the policy to re-run.
Question 5: A managed Mac running macOS Ventura shows that the MDM profile is listed as 'Pending Removal'. What does this status indicate?
- The device was unenrolled but MDM profile deletion is awaiting user approval (Correct answer)
- The Jamf server scheduled an automatic profile renewal
- The device failed the last check-in and is queued for re-enrollment
- FileVault encryption is blocking profile removal
Correct answer: The device was unenrolled but MDM profile deletion is awaiting user approval
In user-approved MDM on macOS Ventura, removing the MDM profile requires explicit user approval, placing it in a 'Pending Removal' state.
Question 6: A Casper technician observes that inventory data in Jamf Pro is weeks old for a specific device. Which factor most commonly causes stale inventory?
- The device is consistently offline or unable to reach the JSS (Correct answer)
- The device's hard drive is nearly full
- Self Service app was removed from the device
- Jamf Pro's database maintenance job is overdue
Correct answer: The device is consistently offline or unable to reach the JSS
Devices can only submit inventory when they can reach the Jamf Pro server, so persistent offline status is the most common cause of stale records.
Question 7: When troubleshooting a failed script execution in Jamf Pro, which script parameter field corresponds to the 'jamf policy' argument '$4'?
- Parameter 1
- Parameter 2 (Correct answer)
- Parameter 4
- Parameter 3
Correct answer: Parameter 2
In Jamf Pro's script parameter numbering, '$4' in a shell script corresponds to Parameter 2 in the policy's script configuration pane (as $1-$3 are reserved).
CCT Troubleshooting & Maintenance 3
A technician needs to troubleshoot why a specific package is not installing via a Jamf policy.
Which log provides the most granular installation details?