Which of these declarative status reports can a device management service get about software updates status?
A. Managed Apple Account not signed in
B. Not enough free space was available
C. Device was outside localized geolocation
D. Device connection unstable
B. Not enough free space was
How do you assign devices to a device management service in Apple Business Manager or Apple School Manager?
A. Create user groups and attach assignment profiles to them.
B. Assign them manually or set up automatic assignment.
C. Use Apple Configurator to restore them for assignment.
D. Set up automatic assignments through Apple or your authorized reseller.
B. Assign them manually or set up automatic assignment.
After you sign in to your Apple Business Manager or Apple School Manager account, you turn on Domain Capture.
Which two of these results occur?
Select two.
A. The domain is locked if it wasn’t unlocked.
B. Unmanaged Apple Accounts that use the organization domain are locked
C. Unmanaged Apple Accounts that use the organization domain are notified
D. The domain is converted to federated authentication.
E. The domain is converted to directory syncing.
A. The domain is locked if it wasn’t unlocked.
&
C. Unmanaged Apple Accounts that use the organization domain are notified
What can a local administrator account do after Mac setup is complete when FileVault setup is skipped during Setup Assistant?
A. Enable FileVault in System Settings unless its restricted by device management policy
B. FileVault becomes permanently unavailable until the device is reenrolled
C. File Vault can only be enabled through the organization’s device management service
D. Contact their system administrator and ask them to enable disk encryption
A. Enable FileVault in System Settings unless its restricted by device management policy
Which statement about root certificates on iPhone or iPad is true?
A. Supervised devices disable user trust settings modifications of root certificates.
B. Supervised devices require manual user approval for modifications of trust settings for root certificates.
C. Unsupervised devices automatically trust all root certificates installed using the device management service.
D. Unsupervised devices can’t install or change trust settings of root certificates.
A. Supervised devices disable user trust settings modifications of root certificates.
Which of these types of digital certificates do Apple devices support for SSL/TLS communication?
A. SSLv2 certificates
B. PGP certificates
C. X.509 root certificates
D. SSH keys
C. X.509 root certificates
Your organization wants to prevent users from reusing the last five passcodes on their managed iPad devices.
Which of these password policies should you implement using device management?
A. Maximum passcode age
B. Adaptive password security
C. Passcode or password history
D. Password pattern recognition
C. Passcode or password history
What is required for Shared iPad?
A. Classroom app
B. Device supervision
C. Schoolwork app
D. Unmanaged Apple Account
B. Device supervision
Which of these results occur when a device management enrollment profile is removed from a device?
A. The user is prompted to reenroll.
B. The device must be restored using Apple Configurator.
C. Managed profiles are removed.
D. The device resets to factory settings.
C. Managed profiles are removed.
Which two of these are ways to create users in Apple Business Manager or Apple School Manager?
Select two.
A. Upload user data through iCloud.
B. Import a list of unmanaged Apple Accounts.
C. Import user credentials from a third-party device management profile.
D. Sync with an identity provider (IdP) using OpenID Connect (OIDC).
E. Create users manually.
D. Sync with an identity provider (IdP) using OpenID Connect (OIDC).
&
E. Create users manually.
What can you do with Apple Configurator for Mac in iPad deployments?
A. Remotely control devices without requiring physical access to them.
B. Enroll devices in device management.
C. Replace iCloud for backing up biometric data on iPad devices.
D. Reassign devices in device management.
B. Enroll devices in device management.
You used your device management service to disable the App Store on your organization’s supervised devices.
What can you use to install, update, and manage apps remotely?
A. Apple Configurator with shared Shortcuts to ASIF images
B. Apple Business Manager or Apple School Manager with a device management service
C. Apple Configurator with Blueprints available from iCloud
D. Apple Business Manager or Apple School Manager with automated redemption codes fulfillment
B. Apple Business Manager or Apple School Manager with a device management service
Which one of these actions can you complete to create Managed Apple Accounts in Apple Business Manager or Apple School Manager?
A. Have users create an Apple Account at account.apple.com.
B. Import them from iCloud backup files.
C. Sync them with unmanaged Apple Accounts.
D. Sync using Open ID Connect (OIDC) with Microsoft Entra ID.
D. Sync using Open ID Connect (OIDC) with Microsoft Entra ID.
What does device management do in a user-owned deployment model?
A. Requires complex passwords
B. Configures devices automatically without user interaction
C. Limits user customization options to organization preset-parameters
D. Gives users the ability to enroll their personal devices to access organizational services
D. Gives users the ability to enroll their personal devices to access organizational services
What is required to sync users with an identity provider (IdP) and Apple Business Manager or Apple School Manager?
A. A paid subscription to Apple Business Manager or Apple School Manager
B. Manual entry of each user’s information
C. Integration of the identity service provider (IdP) using OpenID Connect (OIDC)
D. Use of Apple’s proprietary syncing tool
C. Integration of the identity service provider (IdP) using OpenID Connect (OIDC)
You want to reset a user’s forgotten password on a FileVault-encrypted Mac.
What should you have escrowed in device management to enable this?
A. Personal recovery key
B. Organization recovery key
C. Secure token
D. Bootstrap token
A. Personal recovery key
You’re using Apple Configurator for Mac for the first time. You want to manually add iPhone devices to Apple Business Manager or Apple School Manager.
Which two of these steps are required when you prepare the devices?
Select two.
A. Add an enrollment certificate.
B. Select Activate and Complete Enrollment.
C. Generate a new supervision identity.
D. Select Auto Advance.
E. Select which Setup Assistant panes to skip.
C. Generate a new supervision identity.
&
E. Select which Setup Assistant panes to skip.
Which apps are published through the App Store but are discoverable only with a direct link?
A. Unlisted
B. Custom
C. Public
D. In-house
A. Unlisted
Which two smart card functions are supported on iPhone and iPad?
Select two.
A. Bluetooth proximity card authentication
B. Biometric enrollment for smart card pairing
C. Signing messages in Mail and for third-party apps
D. Authentication for websites using Safari and for third-party apps
E. Automatic certificate provisioning from enterprise servers
C. Signing messages in Mail and for third-party apps
&
D. Authentication for websites using Safari and for third-party apps
Which of these is a benefit of Platform Single Sign-on (Platform SSO) for macOS?
A. Users can synchronize local account credentials with an identity provider (IdP).
B. Users can turn on Kerberos SSO.
C. Users can get a Federated Managed Apple Account.
D. User can leverage IdP passkey support in iCloud Keychain.
A. Users can synchronize local account credentials with an identity provider (IdP).
Which of these types of information must be provided about your organization during sign-up for Apple Business Manager?
A. A Reseller Number and product SKUs
B. A full user roster with email addresses
C. Organization name and phone number
D. An invoice for at least one Apple device
C. Organization name and phone number
Which of these Apple devices supports Auto Advance?
A. Apple TV
B. iPad
C. iPhone
D. Apple Watch
A. Apple TV
You assign an app and a book to a user. Then the user leaves the organization.
Which device management action can you take?
A. Revoke and reassign the book, but not the app
B. Revoke and reassign the app, but not the book
C. Revoke or reassign either license
D. Revoke and reassign both licenses
B. Revoke and reassign the app, but not the book
Which of these account roles in Apple Business Manager or Apple School Manager can enable federated authentication?
A. People Manager
B. Content Manager
C. Device Enrollment Manager
D. Authentication Manager
A. People Manager