Practice Exam - Jamf 170 Course

Jamf 170 Course
Solution
Application
Content Type
Training Content
Utilities & Services
ft:locale
en-US

Directions

Select the best answer for each multiple choice question. There is one correct answer for each question. When you finish, answers can be found here.

  1. How is encryption enabled on a Mac?

    1. By installing Jamf Trust

    2. By enabling FileVault

    3. By setting a password

    4. By adding an admin user named "Encryption"

  2. Which Jamf software detects and quarantines known malware on macOS in order to safeguard organizations from threats?

    1. Jamf Protect

    2. Jamf Pro

    3. Jamf Now

    4. Jamf Connect

  3. Which app is used to make configuration changes that affect device behavior on iOS and iPadOS?

    1. Settings

    2. System Settings

    3. System Preferences

    4. App Settings

  4. A FileVault-encrypted Mac can be unlocked by authenticating with a FileVault-enabled user account. What is the other method by which a FileVault-encrypted computer can be unlocked?

    1. By installing Jamf Trust on the device

    2. By entering a recovery key generated at the time of encryption

    3. By entering the guest account password

    4. By placing the computer in a bag of rice

  5. Which feature of macOS prevents malware from running by only allowing software from verified developers to open?

    1. Doorman

    2. FileVault

    3. XProtect

    4. Gatekeeper

  6. By default, Gatekeeper will only allow an app to open on a Mac if the app is:

    1. Signed and checked

    2. Signed and notarized

    3. Signed and sealed

    4. Verified and notarized

  7. Techniques from the MITRE ATT&CK® matrices are used to create which malware detection feature in the macOS Security portal?

    1. Analytics

    2. Actions

    3. Telemetry

    4. Data forwarding

  8. In the context of the MITRE ATT&CK matrices, what is a technique?

    1. Goal or reason for a malicious actor to perform an action

    2. Action or method used to achieve a goal

    3. Real-world example of a malicious attack

    4. Recommended mitigation steps to remedy a malicious attack

  9. Within the CIS Benchmark®, which part of a security recommendation justifies implementing the recommendation?

    1. Rationale statement

    2. Impact statement

    3. Audit procedure

    4. Remediation procedure

  10. Within the CIS Benchmark, which part of a security recommendation provides steps or code to check the current status of the recommended setting?

    1. Rationale statement

    2. Impact statement

    3. Audit procedure

    4. Remediation procedure

  11. When a device meets a specific level of security recommendations set forth by an organization, that device is considered:

    1. Notarized

    2. Signed

    3. Compliant

    4. Managed

  12. Which tool provides a graphical interface for creating and customizing security baselines?

    1. Jamf Parent

    2. Jamf Integration Manager

    3. Jamf Self Service

    4. Jamf Compliance Editor

  13. In the macOS Security portal, which feature contains a remediation tool to detect, block, and quarantine malicious files or processes on enrolled computers?

    1. Compliance

    2. Telemetry

    3. Threat prevention

    4. Threat detection

  14. In the macOS Security portal, where can individual security rules be enabled or disabled by administrators?

    1. Compliance > Summary

    2. Alerts > All Alerts

    3. Telemetry > New Telemetry Configuration

    4. Compliance > Baseline

  15. Which feature in the macOS Security portal determines what data is logged on enrolled computers, where that data is sent, and how the Jamf Protect agent responds to threats?

    1. Compliance

    2. Alerts

    3. Plans

    4. Analytics

  16. Which feature of the macOS Security portal allows the detection of suspicious behavior on enrolled computers, often based on techniques from the MITRE ATT&CK matrices?

    1. Plans

    2. Analytics

    3. Telemetry

    4. Action configurations

  17. In the context of the macOS Security portal, which term refers to a record of an event on an enrolled computer that may pose a security risk?

    1. Threat

    2. Alert

    3. Compliance

    4. Device controls

  18. Which of the following can be used in a custom prevent list to identify an application to prevent it from opening?

    1. Signing identifier

    2. Application developer certificate

    3. Application icon

    4. Application identifier

  19. Telemetry configurations can include diagnostic and crash report data.

    1. True

    2. False

  20. Which feature of the macOS Security portal must be enabled in order to collect telemetry or unified logs?

    1. Data management

    2. Device controls

    3. Unified logs

    4. Data forwarding

  21. In the Jamf Security Cloud portal, the base policy applies to which group by default?

    1. Standard group

    2. Default group

    3. Base group

    4. Super group

  22. In order to enroll in the Jamf Security Cloud portal, a device needs which of the following?

    1. Setup profile

    2. Activation profile

    3. Activation script

    4. Configuration profile

  23. In the Jamf Security Cloud portal, which of the following determines how threats are reported and remediated on enrolled devices?

    1. Threat detection

    2. Threat prevention policy

    3. Device plan

    4. Device compliance

  24. In the Jamf Security Cloud portal, which feature allows admins to monitor devices for instances where a user has installed a specific app?

    1. App monitoring

    2. App intelligence

    3. App watchlist

    4. App bounty

  25. In the Jamf Security Cloud portal, the base policy affects all enrolled devices within an organization and cannot be overwritten or changed.

    1. True

    2. False

  26. In the Jamf Security Cloud portal, which feature allows an administrator to determine what category a specific domain is classified under?

    1. URL sniffer

    2. Domain generator

    3. Domain checker

    4. Threat prevention

  27. In the Jamf Security Cloud portal, which security report lists devices with one or more identified threats or vulnerabilities?

    1. Threat view report

    2. Device view report

    3. Vulnerability management report

    4. App insights report

  28. What is the name of Jamf's machine learning and mobile threat intelligence engine used to analyze and provide data about online threats in the Jamf Security Cloud portal?

    1. MI:RIAM

    2. JA:RVIS

    3. GER:TRUDE

    4. ML:MTIE

  29. In the context of the Jamf Security Cloud portal, which of the following is a chronological timeline of threats encountered by enrolled devices?

    1. MI:RIAM Analytics

    2. Event log

    3. App insights report

    4. Data stream

  30. Which Terminal command can be used to confirm that the Jamf Protect agent has been deployed to a managed computer?

    1. protectctl version

    2. protect

    3. isprotectinstalled

    4. protectagent version