Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
Which type of app can be distributed through Apple Business Manager?
Apple Business Manager (ABM) supports the distribution of multiple app types via Managed Distribution: custom apps (developed in-house), free apps (from the App Store), and purchased apps (bought through ABM's Apps and Books section). This flexibility allows organizations to manage all app needs within ABM, assigning them to users or devices via MDM. Options A, B, and C are all correct individually, but D encompasses them all, aligning with ABM's comprehensive capabilities as outlined in the Apple Business Manager User Guide.
What's required to use supervision on a device?
Supervision requires Apple Configurator (via USB connection) or Automated Device Enrollment (ADE) through Apple Business Manager (ABM) or Apple School Manager (ASM). These methods apply a supervision identity to the device, enabling advanced management features. An MDM solution (option A) manages supervised devices but isn't the tool for applying supervision. User acceptance (option C) isn't required, as supervision is an administrative action. A VPN configuration (option D) is unrelated. The Apple Platform Deployment Guide specifies these tools for supervision.
Which MDM command restricts access to Startup Security Utility on a Mac?
The SetRecoveryLock command locks the Recovery partition, restricting access to Startup Security Utility. The Mobile Device Management Protocol Reference states, 'The SetRecoveryLock command sets a password for the Recovery partition, restricting access to Startup Security Utility and other recovery options unless the password is provided.' Option B sets a firmware password but not specifically for this utility, and C and D are invalid.
Mobile Device Management Protocol Reference, 'SetRecoveryLock' section.
macOS Security Overview, 'Recovery Lock' section.
What must you upload to MDM so that you can distribute App Store apps to your MDM-enrolled devices?
A content token, downloaded from ABM or Apple School Manager (ASM), must be uploaded to the MDM server to enable Managed Distribution of App Store apps. The Apple Business Manager User Guide explains, 'To distribute apps, download the content token from Apple Business Manager and upload it to your MDM solution. This token links your MDM server to your app licenses, enabling managed distribution.' Options B and D are fictitious, and C is for device enrollment, not app distribution.
Apple Business Manager User Guide, 'Apps and Books' section.
Mobile Device Management Protocol Reference, 'Managed Distribution' section.
What's required to use content caching on a Mac?
Content caching requires a Mac running macOS 10.13 (High Sierra) or later, enabling it to cache content like app updates and iCloud data for network efficiency. An MDM solution (option A) can manage caching settings but isn't required to enable it. Supervision (option C) is unrelated, as caching is a macOS feature, not a supervision requirement. A VPN configuration (option D) doesn't apply. The Apple Platform Deployment Guide specifies the macOS version requirement for content caching.
In which type of ownership model can users personalize apps and data on their personal devices?
In the Bring Your Own Device (BYOD) model with User Enrollment, users own the devices and can personalize them with their own apps and data before and after enrolling in an MDM solution. User Enrollment is designed for personal devices, offering a separation between personal and managed data while allowing user customization. BYOD, organization-owned (option B) is not a valid model, as BYOD implies user ownership. Nonpersonalized, organization-owned (option C) restricts personalization, and personally enabled, organization-owned (option D) applies to organization-owned devices, not personal ones. The Apple Platform Deployment Guide confirms that BYOD with User Enrollment supports personalization on personal devices.
Which type of 802.1X configuration allows Mac computers to connect to Wi-Fi before login and user authentication after login?
System+User Mode supports pre- and post-login connectivity. The Apple Platform Deployment Guide states, 'System+User Mode for 802.1X allows a Mac to connect to Wi-Fi using system credentials before login and switches to user credentials after login, ensuring network access at all stages.' Option B is not a standard term, C requires login first, and D uses only system credentials.
Apple Platform Deployment Guide, '802.1X Authentication' section.
macOS Deployment Reference, 'Network Configuration' section.
Exam domains verified against: Official Apple DEP-2025 exam guide, last checked October 2026.
Recognize the key purpose and function of Apple's built-in MDM framework. Understand the foundational concepts needed to plan device deployment strategies.
Identify key considerations for evaluating an MDM solution for Apple device deployment. Evaluate migration paths between MDM solutions and configure network infrastructure including Wi-Fi, proxies, firewalls, and VPN.
Identify the key concepts and properties of the three main enrollment types for Apple devices. Distinguish device management methods, ownership models, and requirements for each enrollment type.
Manage connections to authorized resellers and carriers. Manage device assignments to MDM servers and handle content purchasing and license transfers.
Explain what Apple Configurator is and how to use it for enrollment, supervision, and deployment. Add devices to Apple Business Manager or Apple School Manager using Apple Configurator.
Identify common strategies and use cases for managing Setup Assistant on Apple devices with an MDM solution. Distinguish strategies for resetting Setup Assistant on managed devices.
Describe the properties that distinguish between declarative configurations for Apple devices as they relate to enrollment types. Use declarative device management to manage Apple devices.
Distinguish the identity services that managed Apple devices support to help you manage passwords and usernames securely. Identify requirements for federated authentication with identity providers.
Explain how distribution of managed apps, custom apps, and proprietary apps to devices or users works. Distinguish common methods for managing separation of personal data and organization data.
Describe what is encrypted on iOS, iPadOS, and macOS, including key storage for FileVault. Identify key methods and strategies for protecting Apple devices in the event of theft or loss.
Sample question from this domain above: Q3
Recognize key considerations for joining managed Apple devices to Wi-Fi networks. Describe the MDM payloads needed to configure managed Apple devices for 802.1X wireless networks.
Sample question from this domain above: Q7
Distinguish common methods and strategies for managing device software updates on Apple devices using an MDM solution. Describe how to manage access to beta releases of Apple operating systems.
Resolve system startup, restore, and recovery issues on a Mac with Apple silicon using macOS Recovery. Configure content caching on Mac.
Sample question from this domain above: Q5
Common questions about the exam itself
