MacOS & iOS Configuration & Management Flashcards
7 cards from real ACS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 MacOS & iOS Configuration & Management flashcards as text
Which macOS command displays the current MDM enrollment status and server URL from the command line?
Answer: profiles status -type enrollment
Running `profiles status -type enrollment` shows whether the Mac is enrolled in MDM and displays the enrollment server URL.
What is the purpose of a SCEP payload in a macOS or iOS configuration profile?
Answer: Automatically request and install certificates from a CA
The SCEP (Simple Certificate Enrollment Protocol) payload automates certificate requests from a certificate authority for device identity.
An administrator wants to prevent users from installing apps from the App Store on supervised iPhones. Which MDM restriction achieves this?
Answer: Set allowAppInstallation to false
The allowAppInstallation restriction in an MDM profile blocks users from downloading or installing any apps from the App Store on supervised devices.
Which iOS enrollment type is designed for employee-owned (BYOD) devices and provides the strongest user privacy protections?
Answer: User Enrollment
User Enrollment is Apple's BYOD-focused enrollment method that separates managed data from personal data, limiting what MDM can see and control.
After updating macOS on a managed Mac, the admin notices that some MDM-pushed restrictions are no longer applied. What is the most likely cause?
Answer: The MDM server's push certificate expired
An expired Apple Push Notification service (APNs) certificate prevents the MDM server from sending commands and profiles to managed devices.
On macOS, which directory stores configuration profiles that apply system-wide to all users?
Answer: /private/var/db/ConfigurationProfiles/
macOS stores installed configuration profiles in `/private/var/db/ConfigurationProfiles/`, which is managed by the profiles daemon.
A user reports that their company iPhone prompts for an MDM enrollment passcode during Setup Assistant. What is this passcode used for?
Answer: Authenticating the device to the organization's MDM server during user-initiated enrollment
During user-initiated MDM enrollment, an enrollment passcode or token verifies that the device belongs to an authorized user in the organization.