What is Activation Lock designed to prevent?
Unauthorized use or reactivation of a lost or stolen device.
When is Activation Lock automatically enabled on a user-owned device?
When the user turns on Find My.
What must a user enter to disable Activation Lock on their personal device?
Their unmanaged Apple Account credentials.
What is required to manage Activation Lock organization-wide?
Apple Business Manager or Apple School Manager.
Can Activation Lock be controlled fully via device management (MDM)?
Yes, server-side with organization-linked Activation Lock.
What is the key difference between organization-linked and user-linked Activation Lock?
Organization-linked is controlled by MDM; user-linked depends on the user’s unmanaged Apple Account.
What requirement must be met for user-linked Activation Lock to activate?
User must enable Find My on the device.
What problem can occur when a user mistakenly applies user-linked Activation Lock on a company-owned device?
The organization cannot unlock it without the user’s Apple ID credentials.
How does organization-linked Activation Lock benefit IT teams?
They can enable or disable Activation Lock remotely.
What two systems support organization-linked Activation Lock?
Apple Business Manager and Apple School Manager.
What is Managed Lost Mode used for?
To lock and locate supervised devices that are lost or stolen.
Which devices support Managed Lost Mode?
Supervised iPhone or iPad devices.
Who can enable Managed Lost Mode?
An organization’s device management service (MDM).
What happens to the device when Managed Lost Mode is enabled?
It locks out the current user and shows a custom message.
Can a device be located in Managed Lost Mode if Location Services are off?
Yes, MDM can still locate it.
How is a device unlocked after Managed Lost Mode is activated?
It must be disabled via the device management service.
Can users bypass Managed Lost Mode?
No.
What is one reason an organization uses Managed Lost Mode?
To protect sensitive data if a company device goes missing.
What determines whether Managed Lost Mode can be used?
The device must be supervised and enrolled in MDM.
What is shown on the screen in Managed Lost Mode?
A customizable message from the organization.
What is the purpose of Stolen Device Protection?
Adds extra security when a device is away from familiar locations.
What counts as a “familiar location”?
Places like home or work.
What happens if an attacker steals your iPhone with passcode knowledge?
Stolen Device Protection prevents critical changes.
Which actions may require additional verification away from trusted locations?
Changing Apple Account password, viewing saved passwords, turning off Find My.
