An administrator needs to remotely lock a lost iOS device and display a custom message on the lock screen. Which MDM command should be used?

DeviceLock with a lock message and phone number.

Restrictions with a lock message.

A configuration profile fails to install on an iOS device. What is a common reason for this failure?

The device's screen brightness is too low

The profile is not signed or is corrupted

The device is in Low Power Mode

The device has too many apps installed

A company is deploying iOS devices to employees. The company wants to ensure that devices are enrolled in MDM before the employees receive them, and that the employees cannot remove the MDM profile. The company also wants to distribute a custom internal app to all devices. Which approach should be used?

Use ABM with Automated Device Enrollment, but without supervision, and deploy the app through MDM.

Use Apple Configurator 2 to prepare devices manually, then deploy the app through MDM.

Use Apple Business Manager with Automated Device Enrollment and a supervision identity, then deploy the app through MDM.

Use user-initiated enrollment via the MDM portal, then deploy the app through MDM.

A company's security policy requires that all corporate iPhones be encrypted. The devices are enrolled in MDM and supervised. The administrator has enforced a passcode policy, but a user reports that their device is not encrypted. What is the most likely cause?

The device is running an older iOS version

The MDM profile does not include the encryption payload

The user has not set a passcode

Which Apple service allows organizations to purchase iOS apps in bulk and distribute them to devices without using individual Apple IDs?

Apple Business Manager (ABM) with Volume Purchase Program (VPP)

GIAC Mobile Device Security Analyst

Domain 1Objective 2

Managing iOS Devices and Applications GMOB Practice Questions (Page 4)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 16–20

16application · easy
An administrator needs to remotely lock a lost iOS device and display a custom message on the lock screen. Which MDM command should be used?
Select an answer first
17foundation · easy
A configuration profile fails to install on an iOS device. What is a common reason for this failure?
Select an answer first
18application · medium
A company is deploying iOS devices to employees. The company wants to ensure that devices are enrolled in MDM before the employees receive them, and that the employees cannot remove the MDM profile. The company also wants to distribute a custom internal app to all devices. Which approach should be used?
Select an answer first
19expert · hard
A company's security policy requires that all corporate iPhones be encrypted. The devices are enrolled in MDM and supervised. The administrator has enforced a passcode policy, but a user reports that their device is not encrypted. What is the most likely cause?
Select an answer first
20foundation · easy
Which Apple service allows organizations to purchase iOS apps in bulk and distribute them to devices without using individual Apple IDs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.