Jamf 100
5 steps for Device Enrollment Program (automated enrollment)
1) Connect MDM with Device Enrollment 2) During activation device checks with Device Enrollment 3) Auto MDM enrollment returns enrollment details 4) Device enrolls with your MDM server 5) Config tasks begin automatically
How many data partitions does the iOS file system utilize? What are they?
2 User / OS
Which model(s) of Apple TV support the App Store?
4th & 5th Generation
What is a computer group?
A manually created group of computers
What happens when a "Lock Computer" command is issued?
A pin is set and is applied at the Firmware level
How are configuration profiles deployed?
APN's
What are the 4 types of Jamf user accounts?
Administrator: R/W/D Auditor: read only Enrollment: can only enroll devices Custom: granular management
If a configuration profile is scoped to all computers excluding the Germany building, which computers will receive the profile?
All computers except Germany group
Why are property list files an important concept for IT administrators?
Allows administration to control user experience, gain insight into user preference based on the plist of the given APP
What are the three main components of Jamf Pro?
Apache Tomcat, Java, MySQL
Where can apps be deployed from?
App Store, Volume Store (formally VPP), or In-House Apps
Which service allows organizations to purchase applications in volume?
Apple Business Manager (Volume Store)
Which service allows organizations to purchase applications in volume?
Apple Business Manager / Volume Store
Which macOS applications can be used to update an Apple TV?
Apple Configurator 2
What does integrating with GSX allow organizations to accomplish?
Apple Global Service Exchange service and repair management (track warranty and purchase info)
What does Jamf Pro require in order to establish trusted communication to Apple's Push Notification service?
Apple ID
What is required to update a 4th generation Apple TV?
Apple ID
Which Apple service is required for remote commands?
Apple Push Notifications Service (APNs)
Besides Jamf Pro, which additional service is required to issue remote commands?
Apple Push Notifications Services (APN's)
Which service allows organizations to create Managed Apple IDs?
Apple School Manager
Jamf Pro supports MDM for Apple TVs running which OS?
Apple TV Software 7 or later, or tvOS 9 or later.
Where is the Terminal app located in macOS?
Application / Utilities
Name the 4 default base directories in the Macintosh HD partition:
Applications, Library, System, Users
Which privilege set grants Jamf Pro users read-only access?
Auditor
Which privilege set would provide a user read-only access to Jamf Pro?
Auditor
Why create a script
Automation
Why are static groups beneficial
Because you can create a group and add computers from other groups to receive similar tasks.
The result of an inventory search can be exported into what three formats?
CSV, XML, TXT
Where could a Jamf Pro server be located?
Cloud (company.jamfcloud.com) or On Prem (company.com:8443)
Which attributes can be used to search for a computer in Jamf Pro inventory
Computer name, serial, department, building
Where can Mac App Store apps be configured for deployment through Jamf Pro?
Computers / Mac App Store
Which configuration profile is unique to tvOS?
Conference Room Display
What is the function of Scope?
Control which computer receive what management
Which privilege set would enable enrolling mobile devices, but not computers?
Custom
Why might an organization enroll mobile devices using User-Initiated Enrollment rather than, or in conjunction with, automated MDM enrollment?
DEP is not available in all countries, Deployed previously without management, or for personally owned devices
Which page allows monitoring the status of commonly viewed items in Jamf Pro?
Dashboard
Name the 2 types of enrollment:
Device Enrollment Program, User initiated
Where can Conference Room Display be configured in Jamf Pro?
Devices/ configuration profiles / conference room display
What do configuration profiles allow IT administrators to accomplish?
Enforce passcode parameters, network configurations, restrictions
Which privilege set would an IT administrator use for an individual who needs to enroll only computers, but not mobile devices?
Enrollment
What are three methods to allow users to enroll their mobile device with Jamf Pro?
Enrollment portal, via email with custom URL, SMS (text)
Name the previous and current disk format
Extended Journaled 10.12 and earlier APFS (apple file system) Mac OS 10.13 and higher
How can content be added to the Dock?
Finder, applications, drag down to doc.
What configuration is required during the macOS Setup Assistant to complete activation?
First Local Account (given admin automatically)
How are static device groups beneficial?
Fixed group that must be updated manually
Which type of partition map (scheme or partition table) does Mac OS (and most OS for that matter) use?
GUID (GPT)
How can a Jamf Pro user update a computer's asset tag in the inventory?
General / Edit
How can a mobile device name be changed through an inventory record?
General / Edit
When integrated with Jamf Pro, which service can display warranty expiration for enrolled computers?
Global Service Exchange (GSX)
How do devices communicate with Jamf Pro?
Initiated by Jamf Pro (JP) JP issues Push Notification, mobile devices retrieve, then refer back to JP to complete task
What are the three components of MDM?
Jamf Pro Server, APN's, iOS Devices
Besides enrollment completed as part of the PreStage Enrollment, what additional configuration options are possible?
LDAP authentication and bind, block removal of MDM profile, enforce local user account security
Limitations
Limitations reduce the initial target of computers based specific users, network segments
When an app is deleted, what happens to its data?
Local Data deleted, data backed up to iCloud or server saved
Name the 4 default volumes on APFS:
Macintosh HD- sys boot volume Preboot- hidden containing info to boot each sys volume Recovery- hidden, includes utilities for troubleshooting VM- virtual memory volume created when High Sierra and later start up
Which additional features are available through a PreStage Enrollment in tvOS?
Make MDM mandatory, Auto advance through tvOS setup, Skip tvOS setup Assistant
What is a managed app?
Managed Apps allow IT administrators to automate the removal of apps on devices that become unmanaged, prevent the backup of app data, and force apps to update from Jamf Pro.
What happens if an exclusion is added to the scope of a configuration profile without a target?
No effect on any computers
What is the earliest version of macOS to support MDM?
OS 10.7
Exclusions
Omit specific targeted computers, computer groups, buildings, departments, users, network segments
What is an Exclusion?
Omit specific targeted computers, computer groups, buildings, network segments
What are the 4 System preferences categories plus the 5th bonus one?
Personal Hardware Network System 3rd party software (appears once 3rd party apps are installed)
What can Spotlight be used for?
Quickly search for files, apps, and content
What are the five Jamf Pro apps?
RECON: computer enrollment ADMIN: manage scripts, packages, dock items COMPOSER: package building to deliver software and profiles IMAGING: imaging and provisioning computers REMOTE: issue remote management tasks
What are three ways macOS can be installed on a Mac?
Recovery Partition, Internet Recovery, Mac App Store
What is a Limitation?
Reduce the initial target of computers
Why should configuration profiles be separated based on functionality?
Reduces complexity when configuring scope and troubleshooting issues
What is the purpose of scope within Jamf Pro?
Scope is the users, computer, mobile devices that receive remote management tasks (apps, configuration profiles, etc)
What else needs to be configured after adding an App to Self Service?
Scope still needs to be configured correctly to deploy apps
Where is Jailbreak Detection located?
Security
Why would an organization decide to use a PreStage Enrollment?
Security, Authentication, setup simplification
Where is hardware, storage, and naming information located on an iOS device?
Settings / General / about
Where are network connections configured on a mobile device?
Settings / Wi Fi
What does Conference Room Display accomplish?
Similar to SAM, CRD allows easy screen sharing via AirPlay, prevents the modifying of settings
what are the 2 types of groups?
Smart group / static group
How can mobile devices be updated to the latest iOS version through a remote command?
Static device group, action, send remote command, select Update iOS
Where would users change their local user account password within OS X?
System Preferences / Users & Groups / Change Password
Which app can be used to navigate tvOS with an iOS device?
The Remote App
How do property list files impact the user experience?
The control and save user preference allowing users to create their own specific experience.
Targets
The initial pool of computers based on all computers, specific computers, computer groups, buildings, departments, users, or user groups
What is the role of the macOS Recovery and which utilities are found there?
To Re-Install OS X Network Utility Terminal Disk Utility
Why would an administrator use Apple Configurator 2 to enroll an Apple TV?
To enroll devices that are not part of or supported by MDM automated enrollment.
Which partition stores user data in iOS?
User Partition
Which directory contains system resources for macOS?
Utilities
What can be accomplished using remote commands?
Wipe Device, Update inventory, restart device
Where does an IT administrator change the attribute fields displayed in a mobile device search?
account preference (per user setting)
What is an Apple ID?
account used to manage and download content purchased from the App Store
If a configuration profile was scoped to target All Mobile Devices with an exclusion for the Sydney building, which device(s) would be impacted?
all devices would receive the configuration except Sydney
How do the 5 (RACIR) apps help IT administrators?
allow IT admins to manage and support devices
Why should configuration profiles be separated based on functionality?
because profiles can effect one another whether intended to or not. This will also help with troubleshooting
How are configuration profiles deployed?
by leveraging APNs and MDM
Where can Processor Speed be located in an inventory record?
computer / hardware
How does enrolling a computer differ from enrolling a mobile device using User-Initiated Enrollment?
computers receive additional software, Binary and management account
What is the function of the iOS Control Center and how is it accessed?
depending on model swiping top left or swiping up from bottom
Which attributes can be used to search for a mobile device in the Jamf Pro inventory?
device name, serial number, building, deparment
Why might one create an additional partition on a disk? Which application can accomplish this?
duel boot Disk Utility
During which step of the iOS Setup Assistant does a mobile device communicate with automated MDM enrollment?
during activation
During which step of macOS Setup Assistant do computers communicate with automated MDM enrollment?
during activation process
How can a script be easily run within the Terminal app?
enter sh into the prompt then drag the script into the terminal window
Where is iOS version located in a device's inventory record?
general
Why are user accounts with custom privileges useful?
giving granular / specific privileges
What is a device group?
groups of devices to be used as targets
Where can S.M.A.R.T. Status be located in an inventory record?
management / computer groups
What do configuration profiles allow IT administrators to accomplish?
management of devices
Scope
must be defined to install configuration profiles through APNs
Which two User-Initiated Enrollment methods allow users to access the enrollment portal?
navigate to a predefined URL Receive an email link
How do computers communicate with Jamf Pro?
on the computer the Jamf Binary uses APNs to communicate with Jamf
How can APNs help IT administrators?
perform management tasks on MDM capable devices
What does the .plist file extension stand for and how are they used by macOS?
preference file it is an XML file in binary and holds the user specific preferences for an app
Where can Shared iPad be enabled in Jamf Pro?
prestage enrollment
Define Enrollment regarding Jamf Pro
process of adding device to Jamf Pro for management enrollment creates an inventory record in the JP data base
What are three specific examples of MDM functionality for computers?
remote command, profiles, and configurations including app installs
Where can Auto-Correction and Predictive keyboard be configured in Settings?
settings / general / keyboard
Where is a notification for available operating system updates located on an iOS device?
settings / general / software update
How does automated MDM enrollment help organizations?
simplify content deployment and management
What are the 3 things that are used to configure Scope?
targets, limitations, exclusions
What is a Target?
the initial pool of computers all computers, specific computers, groups, buildings, departments, users, user groups
What happens if no scope is defined for a management task in Jamf Pro?
then the configuration will not be sent to any devices
Which version of tvOS is required for automated MDM enrollment?
tvOS 10.2
List three specific examples of MDM functionality for mobile devices.
wirelessly configure, update and deploy content