Security Practices & Data Protection Flashcards
7 cards from real ACS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security Practices & Data Protection flashcards as text
A technician is setting up a shared Mac in a public library. Which macOS feature should be enabled to automatically erase guest user sessions after logout?
Answer: Guest User account with 'Delete this user's home folder when they log out' enabled
The built-in Guest User account in macOS automatically wipes the guest's temporary home folder when they log out, leaving no data behind.
What is the primary security purpose of requiring a firmware password on Intel-based Macs?
Answer: To prevent booting from unauthorized external drives or changing startup settings without the password
A firmware password prevents unauthorized users from booting to Recovery, changing the startup disk, or using target disk mode.
Which Privacy & Security feature in macOS requires apps to request permission before accessing files in Desktop, Documents, or Downloads folders?
Answer: Files and Folders (per-folder access control)
The 'Files and Folders' privacy category grants or restricts per-app access to specific user folders like Desktop, Documents, and Downloads.
A user receives an email warning that their Apple ID was used to sign in from an unknown device. Which Apple security feature sent this notification?
Answer: Two-Factor Authentication trusted device notification
When Two-Factor Authentication is enabled, Apple sends a sign-in notification with location to all trusted devices whenever a new sign-in occurs.
An organization wants to prevent users from using USB storage devices on company Macs. Which management approach achieves this on macOS?
Answer: Using an MDM configuration profile to restrict removable storage
MDM configuration profiles can restrict the use of external storage devices on managed Macs via the Restrictions payload.
What does enabling 'Lockdown Mode' on an iPhone or Mac protect against, and who is it intended for?
Answer: Sophisticated state-sponsored cyberattacks; intended for high-risk individuals such as journalists or activists
Lockdown Mode severely limits device functionality to reduce the attack surface against highly targeted mercenary spyware, and is designed for users at extreme risk.
When a macOS app is 'notarized' by Apple, what does that guarantee?
Answer: Apple has scanned the app for known malware and the developer's identity is verified
Notarization means Apple's automated service scanned the app for malicious content and the developer signed it with a verified Apple Developer ID certificate.