CCT Troubleshooting & Maintenance 4 — Questions and Answers
Question 1: A technician must remotely wipe a Casper-managed device that was reported stolen. Which Jamf Pro action sends the erase command?
- Send Remote Lock command
- Issue 'Erase Device' MDM command from device inventory (Correct answer)
- Run a Casper Remote SSH session to wipe the disk
- Deploy a Self Service erase policy
Correct answer: Issue 'Erase Device' MDM command from device inventory
The 'Erase Device' MDM command issued from the device's inventory record in Jamf Pro sends a cryptographic erase command via APNs.
Question 2: After a macOS upgrade, a Casper extension attribute script stops returning data. What is the most likely reason?
- The script's interpreter path changed after the OS upgrade (Correct answer)
- The extension attribute was automatically disabled by Jamf
- The Jamf binary must be re-signed for the new OS version
- Network policies block script execution post-upgrade
Correct answer: The script's interpreter path changed after the OS upgrade
macOS upgrades can change or relocate interpreter paths (e.g., Python 2 removal), causing scripts that reference old paths to silently fail.
Question 3: A Jamf Pro configuration profile fails to install with error code -402620383. What does this error typically indicate?
- The device is not supervised
- A payload in the profile conflicts with an existing system policy or another profile (Correct answer)
- The MDM certificate has expired
- The device's storage is insufficient for the profile
Correct answer: A payload in the profile conflicts with an existing system policy or another profile
Error code -402620383 indicates a profile payload conflict, where a setting in the new profile is already managed by an existing profile or system constraint.
Question 4: Which Jamf Pro built-in report would a technician use to identify all devices that have not checked in within the last 30 days?
- Static computer group filtered by last check-in date
- Smart computer group with criterion 'Last Check-in' more than 30 days ago (Correct answer)
- Jamf Pro health report dashboard
- Jamf Remote scan report
Correct answer: Smart computer group with criterion 'Last Check-in' more than 30 days ago
A Smart computer group with a 'Last Check-in' criterion dynamically identifies devices that have not communicated with the JSS within the defined timeframe.
Question 5: A macOS device's Gatekeeper is blocking a Casper-deployed application. What is the correct Jamf Pro method to resolve this without disabling Gatekeeper system-wide?
- Deploy a privacy preferences policy control (PPPC) profile allowing the app (Correct answer)
- Set the policy to run as root to bypass Gatekeeper
- Disable SIP on the device temporarily
- Add the app to the macOS quarantine exemption list via Terminal on each device
Correct answer: Deploy a privacy preferences policy control (PPPC) profile allowing the app
A Privacy Preferences Policy Control (PPPC) configuration profile grants specific system permissions to the app without lowering overall Gatekeeper security.
Question 6: A Casper technician is troubleshooting slow software distribution. Casper Admin shows the distribution point is reachable but downloads are taking hours. What should be checked first?
- Jamf Pro database fragmentation
- Network bandwidth between the distribution point and the client subnet (Correct answer)
- The policy trigger frequency
- The number of scope exclusions on the policy
Correct answer: Network bandwidth between the distribution point and the client subnet
Slow downloads are almost always a network bandwidth or routing issue between the distribution point and the client, especially across WAN links.
Question 7: A device enrolled via Automated Device Enrollment (ADE) is missing its PreStage enrollment configuration after a wipe and restore. What is the most likely cause?
- The device was removed from Apple Business Manager before the wipe (Correct answer)
- The Jamf Pro server license expired
- The device's serial number changed during the restore
- ADE tokens in Jamf Pro need to be re-downloaded monthly
Correct answer: The device was removed from Apple Business Manager before the wipe
If the device is removed from Apple Business Manager (or Apple School Manager), it loses its ADE assignment and will not receive PreStage configuration on next activation.
CCT Troubleshooting & Maintenance 4
A technician must remotely wipe a Casper-managed device that was reported stolen.
Which Jamf Pro action sends the erase command?