The Device Enrollment Program (DEP) is the core technology that enables automatic, zero-touch MDM enrollment upon device activation. Configuring DEP in Apple Business Manager (or Apple School Manager) and assigning devices to an MDM server is the prerequisite for the described automated setup process. VPP is for app distribution, Managed Apple IDs are for user accounts, and Apple School Manager is the portal used by educational institutions, but DEP is the specific service enabling the automated enrollment.

The Passcode Policy payload within an MDM configuration profile is specifically designed to enforce requirements like passcode type, length, complexity, and the ‘Maximum number of failed attempts’ setting which triggers an erase. The Restrictions payload controls broader device functionalities (like disabling the camera), not the granular passcode failure policy.

When apps are deployed via MDM using VPP (now part of Apple Business Manager), the MDM server maintains management control. By creating a new assignment for the updated app version and issuing an install command, the MDM can automatically replace the old managed version with the new one. Option B is incorrect because a simple refresh command does not force an install; it only checks for available updates. Options A and D are manual, inefficient, and unreliable methods.

Entity verification is a foundational security and legal step. It proves the organization is a legitimate business or institution, which grants it the authority to use services like DEP and VPP. This establishes the organization, not the end-user or reseller, as the legal owner of the software licenses and the entity permitted to remotely manage the devices, which is essential for maintaining control over corporate assets.

Single App Mode is an MDM-controlled feature that locks the device to a single app. The MDM can configure which app runs and can prevent the device from being exited from that app without an administrative command. Guided Access is a user-enabled accessibility feature, not an MDM-managed deployment mode. App Lock is a different restriction, and Web Content Filter is unrelated to app containment.

This is a fundamental concept in VPP/Business Manager app management. A user assignment associates the app license with a user’s Managed Apple ID, allowing them to install the app on any of their managed devices. A device assignment ties the license to a specific device’s serial number, making it available to anyone using that device, which is ideal for shared-device scenarios.

This is a core security feature of DEP (now part of Apple Business Manager). The device’s serial number remains assigned to the organization’s DEP account and MDM server. After a wipe, when the device activates and connects to Apple’s activation servers, it is recognized as a DEP device and is automatically directed to re-enroll in the assigned MDM, ensuring the organization does not lose control of the asset.

For proprietary, internal apps not on the App Store, organizations must use the Custom Apps capability. This involves uploading a signed .ipa file (the iOS application archive) to Apple Business Manager, which then creates a unique distribution certificate. The MDM can then assign and install this custom app to managed devices. Public App Store links and purchased licenses are for App Store apps. Web Clips are bookmarks to websites, not native apps.

The Global HTTP Proxy payload is specifically designed to configure a proxy server for all HTTP/HTTPS traffic originating from the device. When deployed via MDM, it applies this setting automatically without user intervention. A Wi-Fi payload configures connection to a specific network, which may include proxy settings for *that network only*, but the Global HTTP Proxy applies across all network connections (Wi-Fi and cellular).

The Device Enrollment Program (DEP) is the core technology that enables automatic, zero-touch MDM enrollment upon device activation. Configuring DEP in Apple Business Manager (or Apple School Manager) and assigning devices to an MDM server is the prerequisite for the described automated setup process. VPP is for app distribution, Managed Apple IDs are for user accounts, and Apple School Manager is the portal used by educational institutions, but DEP is the specific service enabling the automated enrollment.0