ACS Security Practices & Data Protection 3

Question 1

A technician needs to recover a FileVault-encrypted Mac whose user has forgotten their login password. What is the correct recovery method?

Accepted Answer

Use the FileVault Recovery Key or the linked Apple ID to unlock and reset the password

Answer

FileVault-encrypted Macs can be recovered using the personal Recovery Key generated at setup, or via the owner's Apple ID if that option was chosen.

Question 2

What does 'app sandboxing' protect against on macOS?

Accepted Answer

An app accessing resources and data outside its designated container

Answer

Sandboxing restricts each app to its own container, preventing it from accessing other apps' data or sensitive system resources without explicit permission.

Question 3

A company policy requires that a Mac not be usable if it is reported stolen, even after a wipe. Which combination of features enforces this?

Accepted Answer

Activation Lock + Apple Business Manager (ABM) Device Enrollment

Answer

Activation Lock combined with ABM ensures a wiped device remains locked to the organization's Apple ID until released by an administrator.

Question 4

Which network security protocol does Apple recommend for enterprise Wi-Fi to provide the strongest user authentication for Mac clients?

Accepted Answer

WPA2/WPA3 Enterprise with 802.1X and certificate-based EAP

Answer

802.1X with certificate-based EAP (such as EAP-TLS) provides individual user authentication without sharing a common passphrase.

Question 5

What is XProtect's role in macOS security?

Accepted Answer

It provides signature-based malware detection built into the OS

Answer

XProtect is Apple's built-in signature-based anti-malware that automatically checks downloaded files against a database of known malware.

(ACS) Apple Certified Specialist Practice Test

(ACS) Apple Certified Specialist Practice Test

ACS Security Practices & Data Protection 3