CCT Troubleshooting & Maintenance 2 — Questions and Answers
Question 1: A Casper device is cycling power unexpectedly every few minutes. What is the most likely root cause?
- Corrupted firmware causing a watchdog timer reset (Correct answer)
- User accidentally enabled a scheduled reboot
- Overloaded CPU from background processes
- Loose display cable triggering a sensor fault
Correct answer: Corrupted firmware causing a watchdog timer reset
A watchdog timer reset triggered by corrupted firmware is the most common cause of unexpected repetitive power cycling in Casper devices.
Question 2: Which Casper diagnostic command is used to force a hardware inventory refresh on a managed device?
- jamf recon (Correct answer)
- jamf policy
- jamf manage
- jamf flush
Correct answer: jamf recon
The 'jamf recon' command forces the device to perform a new inventory submission to the Jamf Pro server.
Question 3: A technician notices that smart card authentication is failing after a Casper enrollment. Which component should be checked first?
- Casper Remote connection settings
- The device's certificate trust store (Correct answer)
- MDM profile installation status
- Wi-Fi network adapter driver
Correct answer: The device's certificate trust store
Smart card authentication relies on certificate trust chains, so a missing or expired certificate in the trust store is the most common failure point.
Question 4: After a Jamf Pro server upgrade, policies are no longer triggering on check-in. What is the first troubleshooting step?
- Re-enroll all affected devices
- Verify the JSS URL in the device's MDM profile matches the new server address (Correct answer)
- Reinstall the Jamf binary on each device
- Clear the policy execution history in Jamf Pro
Correct answer: Verify the JSS URL in the device's MDM profile matches the new server address
A server URL mismatch between the device's MDM profile and the upgraded JSS is the most common cause of check-in policy failures post-upgrade.
Question 5: A Casper-managed Mac is showing 'Management Framework Damaged' in Self Service. What corrective action resolves this?
- Run 'sudo jamf fixPermissions'
- Perform a 'sudo jamf removeFramework' followed by re-enrollment (Correct answer)
- Reinstall macOS from Recovery
- Run 'sudo jamf policy -id 1'
Correct answer: Perform a 'sudo jamf removeFramework' followed by re-enrollment
Removing the damaged management framework and re-enrolling the device restores a clean Jamf management state.
Question 6: Which log file on a macOS endpoint is most useful for diagnosing Jamf policy execution failures?
- /var/log/jamf.log
- /Library/Logs/jamf.log (Correct answer)
- /private/var/log/system.log
- /var/log/install.log
Correct answer: /Library/Logs/jamf.log
The /Library/Logs/jamf.log file contains detailed records of every policy execution, error, and action taken by the Jamf binary.
Question 7: A Casper device fails to receive policies because port 8443 is blocked. Which Casper communication path does this affect?
- SSH tunneling for Casper Remote
- Device check-in communication with Jamf Pro (Correct answer)
- Apple Push Notification service relay
- Bluetooth-based configuration profiles
Correct answer: Device check-in communication with Jamf Pro
Port 8443 is the default HTTPS port used by devices to check in and communicate policies with the Jamf Pro server.
CCT Troubleshooting & Maintenance 2
A Casper device is cycling power unexpectedly every few minutes.
What is the most likely root cause?