ACS Security Practices & Data Protection 2 — Questions and Answers
Question 1: A user reports their Mac was lost. Which iCloud feature should a technician enable remotely to prevent unauthorized access to the device?
- Remote Wipe via iCloud.com
- Activation Lock via Find My (Correct answer)
- FileVault remote enable
- Gatekeeper lockdown mode
Correct answer: Activation Lock via Find My
Activation Lock via Find My prevents anyone from erasing or reactivating the device without the owner's Apple ID credentials.
Question 2: Which macOS feature specifically prevents apps downloaded from unidentified developers from running without explicit user approval?
- SIP (System Integrity Protection)
- Gatekeeper (Correct answer)
- Sandbox
- XProtect
Correct answer: Gatekeeper
Gatekeeper checks the developer signature and notarization of downloaded apps before allowing them to run.
Question 3: A customer wants to ensure their Time Machine backups are encrypted. What must be true for encryption to be available on an external backup drive?
- The drive must be formatted as FAT32
- Time Machine encryption is enabled during the initial backup setup or via Time Machine preferences (Correct answer)
- FileVault must be disabled first
- The drive must be formatted as NTFS
Correct answer: Time Machine encryption is enabled during the initial backup setup or via Time Machine preferences
Time Machine allows enabling encryption when first selecting the backup disk or through Time Machine preferences for an existing disk.
Question 4: What is the purpose of the Secure Enclave in Apple Silicon and T2-equipped Macs?
- To accelerate GPU rendering tasks
- To store and protect cryptographic keys and biometric data separately from the main processor (Correct answer)
- To manage RAM allocation for apps
- To enforce network firewall rules
Correct answer: To store and protect cryptographic keys and biometric data separately from the main processor
The Secure Enclave is a dedicated coprocessor that handles cryptographic operations and stores sensitive data like Touch ID fingerprints in isolation.
Question 5: Which command-line tool can a technician use to verify the FileVault encryption status of a Mac?
- diskutil info /
- fdesetup status (Correct answer)
- security filevault status
- nvram -p | grep filevault
Correct answer: fdesetup status
The `fdesetup status` command reports whether FileVault is On, Off, or in the process of encrypting/decrypting.
Question 6: A user's Safari is autofilling passwords for a site that was recently compromised. What built-in macOS/iOS feature can alert the user that their stored password appeared in a known data breach?
- Keychain Access breach alerts
- Password Monitoring in iCloud Keychain / Passwords app (Correct answer)
- Safari Content Blockers
- Screen Time communication limits
Correct answer: Password Monitoring in iCloud Keychain / Passwords app
iCloud Keychain's Password Monitoring (and the Passwords app) compares stored passwords against known breached credential databases and alerts the user.
Question 7: Which Privacy setting in macOS System Settings (or System Preferences) controls which apps are allowed to access the user's camera?
- Security > Privacy > Screen Recording
- Privacy & Security > Camera (Correct answer)
- Privacy & Security > Full Disk Access
- Security > Privacy > Accessibility
Correct answer: Privacy & Security > Camera
The Camera section under Privacy & Security lists apps that have requested camera access and allows the user to grant or revoke permission.
ACS Security Practices & Data Protection 2
A user reports their Mac was lost.
Which iCloud feature should a technician enable remotely to prevent unauthorized access to the device?