Apple Deployment & Mgmt study guide
Apple Deployment & Mgmt · Work through your exam, one topic at a time.
The Apple Deployment and Management exam is the proctored certification assessment tied to Apple Professional Training's Deployment and Management course. Passing it earns the Apple Certified IT Professional digital badge, which can be displayed on professional networking sites. The credential targets IT professionals who deploy, secure, and manage Apple devices at scale in large organizations - a step beyond entry-level help desk support work. The current course and exam are based on iOS 27, iPadOS 27, and macOS Golden Gate, and English-language registration is open now. Topics on this exam: Deployment, Management, Security, and Device Support and Troubleshooting. The Apple Deployment & Mgmt study guide has 4 sections and about 1,177 words.
01Deployment: Enrollment, Provisioning, and Distribution
Apple deployment questions reward precision about who owns the device and what stage of setup you are in. Know the difference between Automated Device Enrollment (ADE, formerly DEP), which is driven by device serial numbers registered through Apple Business Manager or Apple School Manager, and manual enrollment, where a user installs a management profile. ADE requires a supervision-capable path: devices enrolled via ADE are supervised by default, which unlocks restricted payloads and commands. A key trap: the MDM server talks to Apple through an enrollment (server) token, which must be renewed before it expires - an expired token stops new enrollment and some device queries but does not instantly unenroll existing devices.
345 words, about 2 min02Management: Profiles, Payloads, and MDM Commands
A configuration profile is a plist containing one or more payloads (Wi-Fi, VPN, restrictions, certificates, Exchange, etc.). Understand scope: user-level versus device-level payloads, and that some payloads require supervision. Restrictions payloads can disable camera, app installation, or AirDrop - and many of these are supervised-only. Certificates and SCEP payloads are how devices obtain identity for Wi-Fi and VPN.
276 words, about 1 min03Security: FileVault, Activation Lock, and Identity
FileVault 2 on macOS encrypts the startup volume. In managed environments, an institutional recovery key or a personal recovery key can be escrowed to MDM. A classic trap: FileVault enablement can be deferred, and the recovery key must be escrowed before the user is prompted, or the key may be lost. On iOS/iPadOS, data protection is always on; there is no user-facing FileVault toggle.
287 words, about 1 min04Device Support and Troubleshooting: Logs, Recovery, and Diagnostics
Troubleshooting questions test whether you know the right tool. On macOS, Console.app and log collect gather unified logs; /var/log holds legacy logs. On iOS/iPadOS, the device analytics data and MDM command responses are primary. Profile installation failures usually surface as payload-specific errors - check the profile's payload type and whether supervision is required.
269 words, about 1 min