A financial firm needs to distribute an internal iOS app to 500 employees. The app is not available in the App Store. The firm requires that the app be installed without users needing to manually trust a certificate, and that the app be automatically updated when a new version is released. Which distribution method should the firm use?

Use an enterprise developer account to sign the app and host it on an internal web server for users to download.

Use Apple Configurator 2 to install the app on each device via USB.

Use TestFlight to distribute the app to internal testers only.

Use Apple Business Manager with a custom app and assign licenses to users, then deploy the app through MDM.

A law firm is deploying iOS devices to attorneys. The firm requires that devices be enrolled in MDM before the attorneys receive them, and that the attorneys cannot remove the MDM profile. The firm also requires that if a device is lost, the data on it must be protected even if the device is turned off. Which combination of enrollment and security features should be used?

Apple Business Manager with Automated Device Enrollment and a supervision identity, plus a configuration profile that enables Data Protection and restricts profile removal.

User-initiated enrollment via the MDM portal, plus a configuration profile that enables Activation Lock.

Apple Configurator 2 to prepare devices manually, plus a configuration profile that enables Data Protection.

ABM with Automated Device Enrollment, but without supervision, and rely on the user to enable FileVault.

Which method is specifically designed to automate the enrollment of corporate-owned iOS devices into an MDM solution without requiring the end user to manually install a profile?

Apple Business Manager (ABM) automated device enrollment

Apple Configurator 2 only for supervised devices

Over-the-air (OTA) enrollment using a user's Apple ID

Manual configuration profile installation via a web link

A user reports that their iOS device is not receiving MDM commands, such as app installations or configuration profile updates. The device shows as 'enrolled' in the MDM console. What is the most likely cause?

The device has lost its push certificate, so the MDM cannot send commands.

The user has disabled the MDM profile in Settings.

The MDM server is using the wrong port for APNs communication.

The device is not supervised, so MDM commands are ignored.

A user's iPhone is enrolled in MDM, but the device is not receiving push notifications from the MDM server. The device is supervised and connected to the internet. What is the most likely cause?

The device's push certificate has expired

The device's passcode is too short

GIAC Mobile Device Security Analyst

Domain 1Objective 2

Managing iOS Devices and Applications GMOB Practice Questions (Page 2)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 6–10

6application · medium
A financial firm needs to distribute an internal iOS app to 500 employees. The app is not available in the App Store. The firm requires that the app be installed without users needing to manually trust a certificate, and that the app be automatically updated when a new version is released. Which distribution method should the firm use?
Select an answer first
7expert · hard
A law firm is deploying iOS devices to attorneys. The firm requires that devices be enrolled in MDM before the attorneys receive them, and that the attorneys cannot remove the MDM profile. The firm also requires that if a device is lost, the data on it must be protected even if the device is turned off. Which combination of enrollment and security features should be used?
Select an answer first
8foundation · easy
Which method is specifically designed to automate the enrollment of corporate-owned iOS devices into an MDM solution without requiring the end user to manually install a profile?
Select an answer first
9application · medium
A user reports that their iOS device is not receiving MDM commands, such as app installations or configuration profile updates. The device shows as 'enrolled' in the MDM console. What is the most likely cause?
Select an answer first
10expert · hard
A user's iPhone is enrolled in MDM, but the device is not receiving push notifications from the MDM server. The device is supervised and connected to the internet. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Managing iOS Devices and Applications GMOB Practice Questions (Page 2)

Questions 6–10

Which method is specifically designed to automate the enrollment of corporate-owned iOS devices into an MDM solution without requiring the end user to manually install a profile?

A user reports that their iOS device is not receiving MDM commands, such as app installations or configuration profile updates. The device shows as 'enrolled' in the MDM console. What is the most likely cause?

A user's iPhone is enrolled in MDM, but the device is not receiving push notifications from the MDM server. The device is supervised and connected to the internet. What is the most likely cause?

Keep studying — Mobile Device Management and Security