What is the primary purpose of Smart Computer Groups in Jamf Pro?
Smart Computer Groups automatically populate based on defined criteria (like OS version, installed software, or last check-in time). They update dynamically as devices meet or no longer meet the criteria.
What is the difference between a Policy and a Configuration Profile?
Policies execute actions (install apps, run scripts, restart) and can be scoped with triggers. Configuration Profiles apply settings (restrictions, Wi-Fi, certificates) and are continuously enforced.
What are the main Policy triggers in Jamf Pro?
Recurring Check-in, Startup, Login, Logout, Enrollment Complete, Network State Change, Custom (used with ‘jamf policy -event’), and Self Service.
What is the Jamf Binary and where is it located on macOS?
The Jamf Binary is the management agent installed on enrolled devices. It’s located at /usr/local/jamf/bin/jamf and handles communication with Jamf Pro server.
What command would you run to manually trigger a policy with a custom trigger named ‘install-chrome’?
sudo jamf policy -event install-chrome
What is the purpose of Prestage Enrollments?
Prestage Enrollments automate the setup process for devices purchased through Apple Business Manager or Apple School Manager, allowing configuration before first boot.
What are Extension Attributes?
Extension Attributes are custom inventory fields that collect additional information not gathered by default. They can use scripts, LDAP queries, or static values.
What is the recommended frequency for inventory updates?
Daily is typical, but it depends on organizational needs. More frequent updates increase server load but provide more current data for Smart Groups and reporting.
What is a Limitation in Jamf Pro scoping?
Limitations are exclusions that prevent a Configuration Profile or Policy from applying to specific targets, even if they’re included in the scope.
What is the purpose of the ‘Update Inventory’ payload in a Policy?
It forces an immediate inventory submission to Jamf Pro, ensuring the server has current device information after policy execution.
What is a Package in Jamf Pro?
A Package is a .pkg or .dmg file uploaded to Jamf Pro that can be deployed to devices via Policies. Common for software installations.
What is the difference between a Static Group and a Smart Group?
Static Groups are manually populated and don’t change unless manually updated. Smart Groups automatically update based on criteria.
What is Patch Management in Jamf Pro?
Patch Management tracks software versions on devices and automates updates to keep applications current, using internal or external patch sources.
What is the Self Service app?
Self Service is an application that provides users with approved apps, policies, and configuration profiles they can install on-demand without admin privileges.
What is a Script in Jamf Pro?
Scripts are shell or Python code stored in Jamf Pro that can be executed on devices via Policies to perform custom tasks and automation.
What are Script Parameters (4-11)?
Script Parameters allow admins to pass variable values to scripts when executing via Policies, making scripts reusable with different inputs without editing code.
What is the Jamf Pro API?
The API (Classic and Jamf Pro API) allows programmatic access to Jamf Pro for automation, integration with other systems, and custom reporting.
What is a MDM Command?
MDM Commands are Apple MDM framework actions sent to devices (lock, wipe, update inventory, install profile). Viewable in device Management History.
What is the purpose of the Ongoing frequency for policies?
Ongoing frequency means the policy executes every time the trigger is met. Use for tasks that should run repeatedly (not just once per device).
What is the purpose of the Once per computer frequency?
The policy executes only once per device, even if the trigger is met multiple times. Useful for initial setup tasks.
What is FileVault in the context of Jamf Pro?
FileVault is macOS disk encryption. Jamf Pro can enable it, escrow recovery keys, and rotate keys for security compliance.
What is a Recovery Lock Password?
A firmware-level password on Apple Silicon Macs that prevents unauthorized recovery or reinstallation. Jamf Pro can set and escrow these passwords.
What is the difference between Computer Management and Device Management in Jamf Pro?
Computer Management refers to macOS devices. Device Management typically refers to iOS/iPadOS devices. Both use MDM but have different capabilities.
What is Automated Device Enrollment (ADE)?
Formerly DEP, ADE is Apple’s program that allows zero-touch enrollment of devices purchased through Apple Business/School Manager directly into MDM.
