ACS Security Practices & Data Protection 2

Question 1

A user reports their Mac was lost. Which iCloud feature should a technician enable remotely to prevent unauthorized access to the device?

Accepted Answer

Activation Lock via Find My

Answer

Activation Lock via Find My prevents anyone from erasing or reactivating the device without the owner's Apple ID credentials.

Question 2

Which macOS feature specifically prevents apps downloaded from unidentified developers from running without explicit user approval?

Accepted Answer

Gatekeeper

Answer

Gatekeeper checks the developer signature and notarization of downloaded apps before allowing them to run.

Question 3

A customer wants to ensure their Time Machine backups are encrypted. What must be true for encryption to be available on an external backup drive?

Accepted Answer

Time Machine encryption is enabled during the initial backup setup or via Time Machine preferences

Answer

Time Machine allows enabling encryption when first selecting the backup disk or through Time Machine preferences for an existing disk.

Question 4

What is the purpose of the Secure Enclave in Apple Silicon and T2-equipped Macs?

Accepted Answer

To store and protect cryptographic keys and biometric data separately from the main processor

Answer

The Secure Enclave is a dedicated coprocessor that handles cryptographic operations and stores sensitive data like Touch ID fingerprints in isolation.

Question 5

Which command-line tool can a technician use to verify the FileVault encryption status of a Mac?

Accepted Answer

fdesetup status

Answer

The `fdesetup status` command reports whether FileVault is On, Off, or in the process of encrypting/decrypting.

(ACS) Apple Certified Specialist Practice Test

(ACS) Apple Certified Specialist Practice Test

ACS Security Practices & Data Protection 2