Risk Management & Mitigation Flashcards
7 cards from real ACT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Management & Mitigation flashcards as text
A trainer is running an Automated Device Enrollment (ADE) demo and realizes the ABM token linked in the MDM has expired. What is the primary operational risk?
Answer: New devices cannot be automatically enrolled, blocking onboarding workflows
An expired ADE token breaks the automated enrollment pipeline, meaning new devices cannot be enrolled until the token is renewed.
During a Supervised mode demonstration, a trainer accidentally sets a restriction that prevents participants from accessing Safari. What risk mitigation approach resolves this fastest?
Answer: Remove or modify the restriction profile via MDM without touching the devices
MDM allows remote removal or modification of restriction profiles instantly across all supervised devices, making it the fastest and least disruptive fix.
A training participant shares a screenshot of the MDM enrollment URL and credentials on a public Slack channel by mistake. What is the immediate risk mitigation step?
Answer: Rotate the enrollment credentials and revoke any unauthorized enrollments
Rotating credentials and auditing enrollment logs immediately closes the exposure window before unauthorized devices can be enrolled.
An ACT candidate is asked to assess the risk of deploying a new macOS version to a production device fleet immediately after a training session. What is the most prudent recommendation?
Answer: Test on a representative pilot group first, then stage the rollout across the fleet
Staged rollouts allow identification of compatibility issues on a small subset before they impact the entire organization.
Which risk does enabling Content Caching on a training-lab Mac specifically mitigate during large-scale macOS update deployments?
Answer: Risk of network saturation from multiple devices downloading the same large update
Content Caching serves locally cached update files to multiple devices, reducing repetitive large downloads and preventing network congestion.
A participant's Mac is in a DEP-assigned MDM but the organization has no documented off-boarding procedure. What risk does this create when the participant leaves the company?
Answer: The device may retain MDM enrollment and organizational data if not properly wiped and released
Without a documented off-boarding process, departed employees' devices may retain corporate MDM profiles and sensitive organizational data indefinitely.
A trainer is teaching a session on Managed Apple IDs and notices that several test Managed IDs still have active iCloud Drive access from a previous training cohort. What is the correct risk response?
Answer: Audit and purge iCloud Drive content from those Managed IDs before reusing them
Reusing Managed IDs without purging previous iCloud Drive content risks data leakage between cohorts and violates data hygiene best practices.