Networking and Security: Connectivity, Encryption, and Trust
Core concepts
Understand Wi-Fi configuration, Private Wi-Fi Address, and Wi-Fi Assist. Know DNS, DHCP, and how to inspect network settings in macOS (Network settings, ifconfig, networksetup) and iOS. Understand VPN types and per-app VPN via MDM, plus content filters and DNS proxy profiles.
Security fundamentals: FileVault and Data Protection on iOS, passcodes and biometrics (Face ID/Touch ID), and two-factor authentication for Apple ID. Know Gatekeeper/notarization, XProtect, and firewall behavior on macOS. Understand certificates and trust, configuration profile signing, and MDM enrollment security (bootstrap tokens, ABM/ASM). Recognize phishing and social engineering risks and how Managed Device Attestation verifies device integrity.
Traps
Questions conflate iCloud Keychain with general password storage, or assume a VPN encrypts all traffic (split tunneling may not). Another trap: thinking a device passcode alone protects data without Data Protection classes. Don't confuse firewall (inbound) with content filtering (traffic inspection).
Rule of thumb
For any "is this secure?" question, trace the trust chain: device integrity → enrollment → profile signing → encrypted transport → user authentication.
Worked example
A user reports a suspicious profile. Check profile signing and source; unsigned or unknown profiles should be removed, and re-enrollment via MDM restores trusted configuration.