Mobile Device Management (MDM) Flashcards
7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Mobile Device Management (MDM) flashcards as text
An organization wants to silently install apps on supervised iPhones without user interaction. Which MDM capability enables this?
Answer: Volume Purchase Program (VPP) managed distribution
VPP managed distribution allows MDM to silently push apps to supervised devices without requiring user App Store credentials or interaction.
What happens to Managed Apps when a device is unenrolled from MDM?
Answer: Apps are removed automatically if the MDM server is configured to do so
When a device unenrolls, the MDM server can be configured to remove managed apps and their associated data automatically.
Which supervision method is required to enforce a passcode policy that users cannot bypass on an iPhone?
Answer: Device Enrollment Program (ADE) with supervision
ADE-enrolled supervised devices allow MDM to enforce passcode policies that cannot be removed or bypassed by the user.
A technician needs to see all MDM commands queued for a device that is currently offline. Where is this information found?
Answer: The MDM server's command queue for that device
The MDM server maintains a command queue per device; commands are delivered when the device reconnects and checks in.
Which network protocol does an Apple device use to receive push notifications that trigger it to check in with the MDM server?
Answer: APNs (Apple Push Notification service)
MDM relies on APNs to send a lightweight push that prompts the device to contact the MDM server for pending commands.
An IT admin wants to prevent users from adding personal Apple Accounts to company-owned iPhones. Which MDM restriction accomplishes this?
Answer: Restrict 'Allow Adding Personal Apple Accounts'
The MDM restriction to disallow adding personal Apple Accounts prevents users from signing into iCloud or the App Store with a non-Managed Apple Account.
What is the purpose of the 'Remove Management' command sent from an MDM server?
Answer: It unenrolls the device from MDM and removes all managed profiles and apps
The Remove Management command unenrolls the device, stripping managed profiles, payloads, and optionally managed apps without performing a full erase.