Practice Exam Flashcards

(80 cards)

1
Q

Which of these declarative status reports can a device management service get about software updates status?

A. Managed Apple Account not signed in
B. Not enough free space was available
C. Device was outside localized geolocation
D. Device connection unstable

A

B. Not enough free space was

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you assign devices to a device management service in Apple Business Manager or Apple School Manager?

A. Create user groups and attach assignment profiles to them.
B. Assign them manually or set up automatic assignment.
C. Use Apple Configurator to restore them for assignment.
D. Set up automatic assignments through Apple or your authorized reseller.

A

B. Assign them manually or set up automatic assignment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

After you sign in to your Apple Business Manager or Apple School Manager account, you turn on Domain Capture.
Which two of these results occur?
Select two.

A. The domain is locked if it wasn’t unlocked.
B. Unmanaged Apple Accounts that use the organization domain are locked
C. Unmanaged Apple Accounts that use the organization domain are notified
D. The domain is converted to federated authentication.
E. The domain is converted to directory syncing.

A

A. The domain is locked if it wasn’t unlocked.
&
C. Unmanaged Apple Accounts that use the organization domain are notified

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What can a local administrator account do after Mac setup is complete when FileVault setup is skipped during Setup Assistant?

A. Enable FileVault in System Settings unless its restricted by device management policy
B. FileVault becomes permanently unavailable until the device is reenrolled
C. File Vault can only be enabled through the organization’s device management service
D. Contact their system administrator and ask them to enable disk encryption

A

A. Enable FileVault in System Settings unless its restricted by device management policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which statement about root certificates on iPhone or iPad is true?

A. Supervised devices disable user trust settings modifications of root certificates.
B. Supervised devices require manual user approval for modifications of trust settings for root certificates.
C. Unsupervised devices automatically trust all root certificates installed using the device management service.
D. Unsupervised devices can’t install or change trust settings of root certificates.

A

A. Supervised devices disable user trust settings modifications of root certificates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of these types of digital certificates do Apple devices support for SSL/TLS communication?

A. SSLv2 certificates
B. PGP certificates
C. X.509 root certificates
D. SSH keys

A

C. X.509 root certificates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Your organization wants to prevent users from reusing the last five passcodes on their managed iPad devices.
Which of these password policies should you implement using device management?

A. Maximum passcode age
B. Adaptive password security
C. Passcode or password history
D. Password pattern recognition

A

C. Passcode or password history

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is required for Shared iPad?

A. Classroom app
B. Device supervision
C. Schoolwork app
D. Unmanaged Apple Account

A

B. Device supervision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of these results occur when a device management enrollment profile is removed from a device?

A. The user is prompted to reenroll.
B. The device must be restored using Apple Configurator.
C. Managed profiles are removed.
D. The device resets to factory settings.

A

C. Managed profiles are removed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which two of these are ways to create users in Apple Business Manager or Apple School Manager?
Select two.

A. Upload user data through iCloud.
B. Import a list of unmanaged Apple Accounts.
C. Import user credentials from a third-party device management profile.
D. Sync with an identity provider (IdP) using OpenID Connect (OIDC).
E. Create users manually.

A

D. Sync with an identity provider (IdP) using OpenID Connect (OIDC).
&
E. Create users manually.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What can you do with Apple Configurator for Mac in iPad deployments?

A. Remotely control devices without requiring physical access to them.
B. Enroll devices in device management.
C. Replace iCloud for backing up biometric data on iPad devices.
D. Reassign devices in device management.

A

B. Enroll devices in device management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You used your device management service to disable the App Store on your organization’s supervised devices.
What can you use to install, update, and manage apps remotely?

A. Apple Configurator with shared Shortcuts to ASIF images
B. Apple Business Manager or Apple School Manager with a device management service
C. Apple Configurator with Blueprints available from iCloud
D. Apple Business Manager or Apple School Manager with automated redemption codes fulfillment

A

B. Apple Business Manager or Apple School Manager with a device management service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which one of these actions can you complete to create Managed Apple Accounts in Apple Business Manager or Apple School Manager?

A. Have users create an Apple Account at account.apple.com.
B. Import them from iCloud backup files.
C. Sync them with unmanaged Apple Accounts.
D. Sync using Open ID Connect (OIDC) with Microsoft Entra ID.

A

D. Sync using Open ID Connect (OIDC) with Microsoft Entra ID.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does device management do in a user-owned deployment model?

A. Requires complex passwords
B. Configures devices automatically without user interaction
C. Limits user customization options to organization preset-parameters
D. Gives users the ability to enroll their personal devices to access organizational services

A

D. Gives users the ability to enroll their personal devices to access organizational services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is required to sync users with an identity provider (IdP) and Apple Business Manager or Apple School Manager?

A. A paid subscription to Apple Business Manager or Apple School Manager
B. Manual entry of each user’s information
C. Integration of the identity service provider (IdP) using OpenID Connect (OIDC)
D. Use of Apple’s proprietary syncing tool

A

C. Integration of the identity service provider (IdP) using OpenID Connect (OIDC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You want to reset a user’s forgotten password on a FileVault-encrypted Mac.
What should you have escrowed in device management to enable this?

A. Personal recovery key
B. Organization recovery key
C. Secure token
D. Bootstrap token

A

A. Personal recovery key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You’re using Apple Configurator for Mac for the first time. You want to manually add iPhone devices to Apple Business Manager or Apple School Manager.
Which two of these steps are required when you prepare the devices?
Select two.

A. Add an enrollment certificate.
B. Select Activate and Complete Enrollment.
C. Generate a new supervision identity.
D. Select Auto Advance.
E. Select which Setup Assistant panes to skip.

A

C. Generate a new supervision identity.
&
E. Select which Setup Assistant panes to skip.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which apps are published through the App Store but are discoverable only with a direct link?

A. Unlisted
B. Custom
C. Public
D. In-house

A

A. Unlisted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which two smart card functions are supported on iPhone and iPad?
Select two.

A. Bluetooth proximity card authentication
B. Biometric enrollment for smart card pairing
C. Signing messages in Mail and for third-party apps
D. Authentication for websites using Safari and for third-party apps
E. Automatic certificate provisioning from enterprise servers

A

C. Signing messages in Mail and for third-party apps
&
D. Authentication for websites using Safari and for third-party apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which of these is a benefit of Platform Single Sign-on (Platform SSO) for macOS?

A. Users can synchronize local account credentials with an identity provider (IdP).
B. Users can turn on Kerberos SSO.
C. Users can get a Federated Managed Apple Account.
D. User can leverage IdP passkey support in iCloud Keychain.

A

A. Users can synchronize local account credentials with an identity provider (IdP).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which of these types of information must be provided about your organization during sign-up for Apple Business Manager?

A. A Reseller Number and product SKUs
B. A full user roster with email addresses
C. Organization name and phone number
D. An invoice for at least one Apple device

A

C. Organization name and phone number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which of these Apple devices supports Auto Advance?

A. Apple TV
B. iPad
C. iPhone
D. Apple Watch

A

A. Apple TV

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You assign an app and a book to a user. Then the user leaves the organization.
Which device management action can you take?

A. Revoke and reassign the book, but not the app
B. Revoke and reassign the app, but not the book
C. Revoke or reassign either license
D. Revoke and reassign both licenses

A

B. Revoke and reassign the app, but not the book

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which of these account roles in Apple Business Manager or Apple School Manager can enable federated authentication?

A. People Manager
B. Content Manager
C. Device Enrollment Manager
D. Authentication Manager

A

A. People Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
You want to implement DNS over HTTPS filtering on managed devices. Which device management payload should you configure? A. DNS Proxy payload B. Web Content Filter payload C. DNS Settings payload D. Global HTTP Proxy payload
C. DNS Settings payload
26
A user is signed in to a Managed Apple Account. Which of these services or features, if enabled, can they access? A. HomeKit Secure Video B. Apple Card C. iCloud Photos D. Find My
C. iCloud Photos
27
What should an organization do before they verify a domain in Apple Business Manager or Apple School Manager? A. Set up federated authentication for the domain in the organization's Apple Business Manager or Apple School Manager account. B. Upload a root certificate for the domain to Apple Business Manager or Apple School Manager to validate domain ownership. C. Confirm that the domain isn't being used in another Apple Business Manager or Apple School Manager instance. D. Set up Apple Push Notification service (APNs) for all devices in the organization.
C. Confirm that the domain isn't being used in another Apple Business Manager or Apple School Manager instance.
28
What is a benefit of using Apple Business Manager or Apple School Manager with a device management service? A. Devices are automatically updated when new OS versions are released. B. Eligible devices can be automatically enrolled without manual setup. C. Users can skip Setup Assistant when they first start a device. D. Managed Apple Accounts are automatically created.
B. Eligible devices can be automatically enrolled without manual setup.
29
You want to streamline authentication flows for users who are enrolling their devices into device management. They're using account-driven enrollment. Which technology can you use? A. Enrollment single sign-on (SSO) for iPhone and iPad B. Sign in with Apple C. Sign in with Apple at Work & School D. Biometric authentication
A. Enrollment single sign-on (SSO) for iPhone and iPad
30
What is a capability of Apple Configurator for Mac? A. Automatically enroll devices in your device management service. B. Push profile updates over the air. C. Buy apps and books. D. Enable Managed Lost Mode.
A. Automatically enroll devices in your device management service.
31
You're a Content Manager for your organization in Apple Business Manager or Apple School Manager. You need to transfer app licenses to another location. When you initiate the transfer, you don't see the target location listed. What's the likely reason it isn't listed? A. You don't have Content Manager permissions for that location. B. The location has reached its maximum permitted licenses. C. The app licenses aren't valid at that location. D. You must also have the role of Location Manager.
A. You don't have Content Manager permissions for that location.
32
You want to configure 20 iPad devices to have the same settings. Which feature of Apple Configurator for Mac should you use? A. Device groups B. Configuration templates C. Blueprints D. Enrollment profiles
C. Blueprints
33
Which of these strategies should you consider when you design a Wi-Fi network for Apple devices? A. Use the -70 dBm trigger threshold. B. Turn off Bonjour services on the network. C. Use overlapping channels in the 2.4 GHz band. D. Create hidden SSIDs for better performance.
A. Use the -70 dBm trigger threshold.
34
A user enrolled their personally-owned iPhone in your device management service to access organizational services. Which of these is cryptographically separated for managed and personal data? A. Safari bookmarks B. Safari profiles C. Calendar D. Messages
C. Calendar
35
Your locally hosted device management service is configured with a Transport Layer Security (TLS) certificate from a recognized certificate authority What is the reason? A. The service can install macOS updates. B. Encrypted communication between devices and the service. C. You can add the service to Apple Business Manager. D. DNS lookups complete faster.
B. Encrypted communication between devices and the service.
36
You configure a Setup Assistant payload to skip the Location Services pane. What is the Location Services status during and after enrollment? A. It's shown during Setup Assistant and turned off, but a local administrator can turn it on. B. It's hidden during Setup Assistant and turned off, but a user can turn it on. C. It's shown during Setup Assistant and turned off, but a user can turn it on. D. It's hidden during Setup Assistant and turned off, but a local administrator can turn it on.
B. It's hidden during Setup Assistant and turned off, but a user can turn it on.
37
You're configuring federated authentication. Which two of these requirements must you meet before you complete your setup? Select two. A. The identity provider must support OAuth 2.0. B. You must have the Administrator or People Manager role. C. You must verify the domain in Apple Business Manager or Apple School Manager. D. You must disable multi-factor authentication for Managed Apple Accounts. E. The domain must already be used by Managed Apple Accounts.
B. You must have the Administrator or People Manager role. & C. You must verify the domain in Apple Business Manager or Apple School Manager.
38
You want to hide the Siri and language panes during setup on Apple TV devices. What should you configure? A. Setup Assistant B. Siri in a Managed Apple Account C. Provisioning profile D. Restrictions payload
A. Setup Assistant
39
What's the function of authentication among Apple's identity service methods? A. It verifies a user's identity to ensure legitimacy. B. It defines which resources a user can access. C. It lets users move freely between multiple systems while maintaining security. D. It establishes trust between different identity providers (IdPs).
A. It verifies a user's identity to ensure legitimacy.
40
Which AssetCacheManagerUtil command disables content caching? A. AssetCacheManagerUtil remove B. AssetCacheManagerUtil uncache C. AssetCacheManagerUtil deactivate D. AssetCacheManagerUtil stop
C. AssetCacheManagerUtil deactivate
41
Your organization wants to tunnel IP traffic back to the organization to have full control over iPhone traffic. Which VPN connection method should you use? A. Always On VPN B. Custom VPN C. VPN On Demand D. Per-app VPN
A. Always On VPN
42
Which VPN protocol is supported natively across iOS, iPadOS, macOS, tvOS, watchOS, and visionOS? A. OpenVPN B. IKEv2 C. WireGuard D. SSTP
B. IKEv2
43
Which two of these conditions define how you can configure all payloads? Select two. A. Whether the payload requires device supervision B. Whether the payload supports federation C. Whether the payload contents are encrypted D. Supported operating systems and delivery channels E. Supported device management frameworks and services
A. Whether the payload requires device supervision & D. Supported operating systems and delivery channels
44
What should you do to prevent accidental changes to unrelated settings during profile updates? A. Combine frequently updated payloads into one profile. B. Assign profiles at the Device-Group level. C. Use Apple Configurator to periodically reapply the set of configuration profiles. D. Use separate configuration profiles.
D. Use separate configuration profiles.
45
Your device management service revokes an app license from an iPhone. But it doesn't uninstall the app. How long does the app remain usable on the device? A. Until the device restarts B. Indefinitely until manually removed C. 7 days D. 30 days
D. 30 days
46
Why should you enable Sign in with Apple for your Managed Apple Accounts? A. Users can sign in with their existing user name and password. B. You can stop users from signing in to an unmanaged Apple Account to access apps that support Sign in with Apple. C. Users with the role of Administrator can enable directory syncing from a third-party identity provider (IdP). D. Users can sign in to their Managed Apple Account to access apps that support Sign in with Apple.
D. Users can sign in to their Managed Apple Account to access apps that support Sign in with Apple.
47
During enrollment in device management, Mac computers fail to complete the enrollment while connected to Ethernet. The enrollment succeeds when they're connected to Wi-Fi. Which network requirement should you review? A. Wi-Fi networks must support certificate-based authentication. B. Ethernet interfaces must have static IP addresses for supervised enrollment. C. Apple Push Notification service (APNs) support only wireless communication over TCP port 443. D. Outbound access to TCP port 5223 must be allowed on Ethernet and Wi-Fi subnets.
D. Outbound access to TCP port 5223 must be allowed on Ethernet and Wi-Fi subnets.
48
Which of these options can you enforce during Mac setup using Automated Device Enrollment? A. Location Services B. FileVault C. Stolen Device Protection D. Face ID
B. FileVault
49
Which statement is true about account-driven User Enrollment? A. It provides more configuration options than Device Enrollment. B. It automatically enforces supervision on enrolled devices. C. It works with Managed Apple Accounts. D. It gives IT administrators the ability to erase personal data on a device.
C. It works with Managed Apple Accounts.
50
You're evaluating device management services for your organization. Enforcing software updates is critical. Which feature of a device management service gives you the ability to enforce software updates? A. Support for content tokens B. Support for multiple device management server tokens C. Query and reporting services D. Support for declarative device management
D. Support for declarative device management
51
Which device management enrollment type results in supervision of an iPhone? A. Account-driven User Enrollment B. Account-driven Device Enrollment C. Profile-driven enrollment D. Automated Device Enrollment
D. Automated Device Enrollment
52
You're setting up a group of iPad devices using Apple Configurator and want to automate supervision and enrollment. What must you apply? A. A certificate stored in Keychain Access B. A Blueprint that includes a Prepare Device Assistant C. A restore image downloaded from Apple D. A configuration profile signed by your device management service
B. A Blueprint that includes a Prepare Device Assistant
53
Which statement best describes identity provider (IdP) support in Apple Business Manager or Apple School Manager? A. Apple Business Manager or Apple School Manager require custom API integration for all user-sync options. B. Syncing users is supported with identity providers (IdPs) that use OpenID Connect (OIDC). C. Apple Business Manager or Apple School Manager can sync only users with iCloud accounts. D. Only Google Workspace and Microsoft Entra ID are supported identity providers.
B. Syncing users is supported with identity providers (IdPs) that use OpenID Connect (OIDC).
54
Users report that after they move from one conference room to another, they experience slow Wi-Fi. You discover that the devices don't join the closest access point. Why do user devices remain associated with the first access point? A. The broadcast signal of the first access point has a higher maximum data rate. B. The signal strength hasn't met the device's trigger threshold. C. The trigger thresholds aren't properly configured in the Wi-Fi profile. D. Fast roaming isn't turned on for the wireless access controller.
B. The signal strength hasn't met the device's trigger threshold.
55
Which enrollment type is required to supervise an iPhone? A. Account-driven Device Enrollment B. Account-driven User Enrollment C. Automated Device Enrollment D. Profile-driven Enrollment
C. Automated Device Enrollment
56
What happens if you don't pair your smart card with your Mac user account when prompted? A. You can use a temporary guest account that the system automatically creates. B. You can use the card to access websites but you can't use it to log in to your user account. C. You must restart the Mac to recognize the smart card. D. You can't use any smart card functions until pairing occurs.
B. You can use the card to access websites but you can't use it to log in to your user account.
57
What are two reasons you should provide users with a Managed Apple Account? Select two. A. Users can store Documents folders on managed devices in organization storage instead of iCloud Drive. B. Managed Apple Accounts support iCloud Keychain recovery using a recovery contact. C. You can manage the iCloud services users can access and the devices they can sign in to. D. It's the only way to access all iCloud restrictions on a managed device. E. A Managed Apple Account is owned by your organization.
C. You can manage the iCloud services users can access and the devices they can sign in to. & E. A Managed Apple Account is owned by your organization.
58
You want to distribute App Store apps to your devices that are enrolled in device management. What must you upload to device management? A. Content token B. Distribution token C. Server token D. App token
A. Content token
59
Which of these types of information must be provided during sign-up for Apple Business Manager? A. A full employee roster with email addresses B. Organization name C. A Reseller Number and product SKUs D. An invoice for at least one Apple device
B. Organization name
60
Which condition must be met for iPhone to connect to a wireless LAN on the 5 GHz band? A. Received signal strength indicator greater than 68 dBm B. Received signal strength indicator greater than -65 dBm C. Wi-Fi payload configured to prioritize 5 GHz band D. Network payload configured to auto-join 5 GHz band
B. Received signal strength indicator greater than -65 dBm
61
Which of these statements is true when you integrate iCloud collaboration with an Apple deployment? A. For personal Apple Accounts, organizations define whether collaboration is possible only with internal users or also with external users. B. For Managed Apple Accounts, organizations define whether collaboration is possible only with internal users or also with external users. C. For personal Apple Accounts, organizations define whether collaboration is possible only with internal users. D. For any Apple Account, organizations define whether collaboration is possible only with external users.
B. For Managed Apple Accounts, organizations define whether collaboration is possible only with internal users or also with external users.
62
Which enrollment method simplifies initial device setup without IT having to physically touch or prepare devices? A. Device Enrollment B. Profile-based Enrollment C. Declarative Device Enrollment D. Automated Device Enrollment
D. Automated Device Enrollment
63
You want to ensure that all newly bought iPhone devices are automatically supervised during setup. Which of these actions should you verify during deployment? A. Devices are enrolled using Automated Device Enrollment. B. Users sign in to a Managed Apple Account on their device C. Devices are added to Apple Configurator with supervision disabled. D. Users manually download a configuration profile.
A. Devices are enrolled using Automated Device Enrollment.
64
Which of these is required to use Shared iPad? A. The users configured for Shared iPad in Apple Business Manager or Apple School Manager B. An enrollment profile configured for Shared iPad in device management C. A device management command to configure Shared iPad D. A device configured for Shared iPad in Apple Business Manager or Apple School Manager
B. An enrollment profile configured for Shared iPad in device management
65
How do you set up default device assignments in Apple Business Manager or Apple School Manager? A. Configure Device Assignment rules in the portal's devices section. B. Enable bulk assignment mode in the portal's Device Management settings. C. Edit device assignment settings in the portal's preferences below Device Management Services. D. Set up automatic device assignment workflows in the portal's Activity section.
C. Edit device assignment settings in the portal's preferences below Device Management Services.
66
You disconnect Apple Business Manager from Microsoft Entra ID and reconnect. The accounts are synced to Apple Business Manager. What should you do to avoid account merge issues? A. Disable Manual IdP Sync. B. Disable Auto Merge. C. Enable Prevent Account Conflicts. D. Enable Advanced Conflict Resolution.
B. Disable Auto Merge.
67
Which two payloads can be used to connect Apple devices to 802.1X EAP-TLS networks? Select two. A. Identity B. Encryption C. Certificates D. Network E. Trust
C. Certificates & D. Network
68
Which of these strategies should you consider when you design a Wi-Fi network for Apple devices? A. Create hidden SSIDs for better performance. B. Ensure proper access point placement. C. Turn off Bonjour services on the network. D. Use overlapping channels in the 2.4 GHz band
B. Ensure proper access point placement.
69
What are two functions of Secure Enclave? Select two. A. Process data from Face ID and Touch ID sensors. B. Encrypt tokens for Recovery Lock, Bypass Code, and Personal Recovery Key. C. Provide secure generation and key storage for encrypting data at rest. D. Encrypt mail, web, and other internet traffic. E. Secure device management communications and Apple Push Notification service (APNs) notifications.
A. Process data from Face ID and Touch ID sensors. & C. Provide secure generation and key storage for encrypting data at rest.
70
Which content types are retained in a backup created using a Managed Apple Account? A. Only Managed App data B. All data, including system settings and personal app data C. Only personal data D. Only configuration profiles, network settings, and Managed Apps
A. Only Managed App data
71
A user reports that their managed Mac restarted, and they're asked for a six-digit PIN. What is the most likely cause? A. You sent the Lock command. B. You sent the EraseDevice command. C. You turned on Managed Lost Mode. D. You turned on Activation Lock.
A. You sent the Lock command.
72
Which of these results occur when a device management enrollment profile is removed from a device? A. Managed App data is removed. B. The device resets to factory settings. C. The user is prompted to reenroll. D. The device must be restored using Apple Configurator.
A. Managed App data is removed.
73
What does a payload define on a device? A. The order in which profiles are applied during setup B. The user's Apple Account permissions C. The enrollment type used by a device D. How a specific device function is configured
D. How a specific device function is configured
74
You want to retain the eSIM on an iPhone that you're redeploying. Which device management capability has an option that gives you this ability? A. Managed erase B. Redeploy with eSIM C. Remote wipe D. Rapid deployment
C. Remote wipe
75
Your organization bought 100 iPad devices from a new Apple Authorized Reseller. You want the devices to automatically appear in Apple Business Manager or Apple School Manager. What must you add to make the devices appear? A. Reseller Number B. Organization ID C. Customer Number D. Purchase Order Number
A. Reseller Number
76
Your organization has multiple locations representing different departments. You need to delete one of them in Apple Business Manager or Apple School Manager. What must you do before you delete the location? A. Transfer accounts and app or book licenses to another location. B. Remove assigned user roles from the location. C. Unenroll devices associated with the location from device management. D. Reassign the organization's primary domain to a different location.
A. Transfer accounts and app or book licenses to another location.
77
You're using your organization's device management service to change the password of a managed administrator account. The account is secure token enabled. What is the result? A. The secure token password is updated, not the login password. B. The login password can't be changed. C. The login and secure token passwords are updated. D. The login password is updated, not the secure token password.
D. The login password is updated, not the secure token password.
78
What is the purpose of enabling the Kerberos SSO extension to work with local Mac user accounts? A. It allows offline access to all enterprise resources. B. It simplifies password management across multiple systems. C. It provides enhanced security through device-specific credentials. D. It enables authentication without requiring domain membership.
D. It enables authentication without requiring domain membership.
79
Which threat does Managed Device Attestation help protect against? A. An unauthorized user inserting malicious code during a software update B. A compromised device disabling Activation Lock C. A compromised device lying about its properties D. Bypassing kernel permissions to allow writability of critical system files
C. A compromised device lying about its properties
80
Which type of declarations are defined in declarative device management? A. Activations B. Devices C. Enrollments D. Security
A. Activations