JAMF 300 EXAM STUDY GUIDE ACTUAL EXAM QUESTIONS
AND CORRECT DETAILED ANSWERS A NEW UPDATED
VERSION LATEST 2026-2027 ( EXPERT VERIFIED ANSWERS)
ALREADY GRADED A+
1. A Jamf Pro administrator needs to deploy a configuration profile that enforces FileVault 2
escrow. Which payload must be configured?
A) Security & Privacy
B) Login Window
C) Disk Encryption
D) Restrictions
Rationale: The Disk Encryption payload in a configuration profile specifically manages
FileVault 2 settings, including institutional recovery keys and escrow to Jamf Pro. Security &
Privacy is for Gatekeeper and firewall settings.
2. Which type of Jamf Pro computer prestage enrollment allows automatic device
assignment without user interaction?
A) User-initiated enrollment
B) Automated Device Enrollment (ADE)
C) Recurring enrollment
D) Invitation-only enrollment
Rationale: ADE (formerly DEP) enables automatic, zero-touch enrollment where devices are
assigned to Jamf Pro and enroll during setup assistant without user credentials.
,3. A policy fails to run on a scoped Mac. The administrator checks the policy log and sees
"Frequency: Ongoing." What is the most likely cause?
A) The policy is set to execute only once
B) The policy has no defined trigger
C) The Mac is offline
D) The policy is excluded by a smart group
Rationale: If a policy has no trigger (e.g., startup, recurring check-in, or custom event), it will
never execute regardless of the frequency setting. Ongoing frequency still requires a trigger.
4. Which command verifies the Jamf framework connection status and triggers a recon on a
Mac?
A) sudo jamf policy
B) sudo jamf manage
C) sudo jamf recon
D) sudo jamf enroll
Rationale: sudo jamf recon forces inventory update and validates communication with Jamf
Pro. jamf policy runs policies, not inventory collection.
5. During a mass import of computers via CSV, what field is required to match existing
devices for updates?
A) Serial Number
B) MAC Address
C) UDID
D) Asset Tag
Rationale: Jamf Pro uses the UDID (Unique Device Identifier) as the primary key to match
existing computer records. Serial numbers are also common, but UDID is the internal
identifier.
, 6. An administrator wants to deploy a script that runs only once per user per computer. Which
policy execution frequency should be used?
A) Once per computer
B) Once per user per computer
C) Ongoing
D) Daily
Rationale: Once per user per computer ensures the script runs the first time each user logs
into each computer, then never again for that combination.
7. Which macOS system setting must be disabled to allow Jamf Pro to manage PPPC
(Privacy Preferences Policy Control) configurations?
A) FileVault
B) System Integrity Protection (SIP)
C) Gatekeeper
D) XProtect
Rationale: SIP blocks modification of system-protected files; full PPPC payload deployment
often requires SIP partially disabled or approved kernel extensions, though modern Jamf
uses approved MDM flags.
8. A mobile device is not checking in to Jamf Pro. Which port must be open on the network
for iOS devices to communicate with Jamf Pro over HTTPS?
A) 80
B) *443*
C) 8443
D) 2195
Rationale: Jamf Pro communicates with iOS/iPadOS devices over port 443 (HTTPS). Port
2195 is for Apple Push Notification service (APNs) but only from Apple to devices.
AND CORRECT DETAILED ANSWERS A NEW UPDATED
VERSION LATEST 2026-2027 ( EXPERT VERIFIED ANSWERS)
ALREADY GRADED A+
1. A Jamf Pro administrator needs to deploy a configuration profile that enforces FileVault 2
escrow. Which payload must be configured?
A) Security & Privacy
B) Login Window
C) Disk Encryption
D) Restrictions
Rationale: The Disk Encryption payload in a configuration profile specifically manages
FileVault 2 settings, including institutional recovery keys and escrow to Jamf Pro. Security &
Privacy is for Gatekeeper and firewall settings.
2. Which type of Jamf Pro computer prestage enrollment allows automatic device
assignment without user interaction?
A) User-initiated enrollment
B) Automated Device Enrollment (ADE)
C) Recurring enrollment
D) Invitation-only enrollment
Rationale: ADE (formerly DEP) enables automatic, zero-touch enrollment where devices are
assigned to Jamf Pro and enroll during setup assistant without user credentials.
,3. A policy fails to run on a scoped Mac. The administrator checks the policy log and sees
"Frequency: Ongoing." What is the most likely cause?
A) The policy is set to execute only once
B) The policy has no defined trigger
C) The Mac is offline
D) The policy is excluded by a smart group
Rationale: If a policy has no trigger (e.g., startup, recurring check-in, or custom event), it will
never execute regardless of the frequency setting. Ongoing frequency still requires a trigger.
4. Which command verifies the Jamf framework connection status and triggers a recon on a
Mac?
A) sudo jamf policy
B) sudo jamf manage
C) sudo jamf recon
D) sudo jamf enroll
Rationale: sudo jamf recon forces inventory update and validates communication with Jamf
Pro. jamf policy runs policies, not inventory collection.
5. During a mass import of computers via CSV, what field is required to match existing
devices for updates?
A) Serial Number
B) MAC Address
C) UDID
D) Asset Tag
Rationale: Jamf Pro uses the UDID (Unique Device Identifier) as the primary key to match
existing computer records. Serial numbers are also common, but UDID is the internal
identifier.
, 6. An administrator wants to deploy a script that runs only once per user per computer. Which
policy execution frequency should be used?
A) Once per computer
B) Once per user per computer
C) Ongoing
D) Daily
Rationale: Once per user per computer ensures the script runs the first time each user logs
into each computer, then never again for that combination.
7. Which macOS system setting must be disabled to allow Jamf Pro to manage PPPC
(Privacy Preferences Policy Control) configurations?
A) FileVault
B) System Integrity Protection (SIP)
C) Gatekeeper
D) XProtect
Rationale: SIP blocks modification of system-protected files; full PPPC payload deployment
often requires SIP partially disabled or approved kernel extensions, though modern Jamf
uses approved MDM flags.
8. A mobile device is not checking in to Jamf Pro. Which port must be open on the network
for iOS devices to communicate with Jamf Pro over HTTPS?
A) 80
B) *443*
C) 8443
D) 2195
Rationale: Jamf Pro communicates with iOS/iPadOS devices over port 443 (HTTPS). Port
2195 is for Apple Push Notification service (APNs) but only from Apple to devices.
