Which feature allows IT administrators to manage cellular settings on a device?
Answer : A
Configuration profiles allow IT administrators to manage cellular settings on iOS/iPadOS devices, such as configuring APN settings, disabling data roaming, or restricting cellular data for specific apps. These profiles are deployed via MDM or manually. Find My (option B) and iCloud (option C) are unrelated to cellular management. MDM (option D) delivers profiles, but the profiles contain the settings. The Apple Platform Deployment Guide details cellular configuration via profiles.
What's the benefit of using Apple Business Manager?
Answer : B
Apple Business Manager (ABM) enables device and content management by providing a portal to enroll devices via ADE, purchase and distribute apps/books through Managed Distribution, and manage user accounts. This centralizes organizational control over Apple deployments. Personalization (option A) is user-driven, not an ABM benefit. Network performance (option C) is enhanced by content caching, not ABM. Data separation (option D) is a User Enrollment feature. The Apple Business Manager User Guide highlights device and content management as ABM's core benefit.
Which Apple technology can an identity provider (IdP) use to implement modern authentication protocols for iPhone, iPad, and Mac?
Answer : A
SSO extensions support modern protocols. The Apple Platform Deployment Guide states, 'Single sign-on (SSO) extensions allow IdPs to integrate modern authentication protocols like OAuth 2.0 or OpenID Connect across iOS, iPadOS, and macOS.' Options B, C, and D (corrected from 'WireGuar') are networking technologies, not authentication-focused.
Apple Platform Deployment Guide, 'SSO Extensions' section.
macOS Security Overview, 'Authentication Technologies' section.
Which type of enrollment supports Shared iPad?
Answer : A
Shared iPad, a feature for multi-user environments like education or business, requires devices to be supervised and enrolled via Automated Device Enrollment (ADE) through Apple School Manager (ASM) or Apple Business Manager (ABM). ADE ensures the device is pre-configured with an MDM solution that supports Shared iPad settings, such as user session management with Managed Apple IDs. Device Enrollment (option B) can supervise devices but isn't optimized for Shared iPad's automatic setup. User Enrollment (option C) is for BYOD and doesn't support Shared iPad, which is for organization-owned devices. The Apple Platform Deployment Guide specifies ADE for Shared iPad deployment.
You try to start in macOS Recovery. You're asked to choose a user and enter a password. Why are you asked to choose a user and enter a password?
Answer : B
FileVault encryption requires authentication. The macOS Security Overview states, 'When FileVault is enabled, macOS Recovery requires a FileVault-enabled user account and password to decrypt the disk.' Option D (Recovery Lock) uses a separate password, not user selection.
macOS Security Overview, 'FileVault in Recovery' section.
Apple Platform Security Guide, 'Recovery Access' section.
What must you upload to MDM so that you can distribute App Store apps to your MDM-enrolled devices?
Answer : A
A content token, downloaded from ABM or Apple School Manager (ASM), must be uploaded to the MDM server to enable Managed Distribution of App Store apps. The Apple Business Manager User Guide explains, 'To distribute apps, download the content token from Apple Business Manager and upload it to your MDM solution. This token links your MDM server to your app licenses, enabling managed distribution.' Options B and D are fictitious, and C is for device enrollment, not app distribution.
Apple Business Manager User Guide, 'Apps and Books' section.
Mobile Device Management Protocol Reference, 'Managed Distribution' section.
You're using Apple Business Manager or Apple School Manager. Which two account roles can manage the federation process, but can't sign in using federated authentication? (Select two.)
Answer : A, B
Administrator and People Manager roles manage federation but use local ABM/ASM credentials. The Apple Business Manager User Guide states, 'Administrators and People Managers can configure and manage the federation process in Apple Business Manager or Apple School Manager, but their accounts remain local and cannot sign in using federated authentication.' Options C, D, and E lack these permissions or are not relevant roles for federation management.
Apple Business Manager User Guide, 'Roles and Federated Authentication' section.
Apple Platform Deployment Guide, 'Identity Management Roles' section.