Practice Test GeeksACSP - Apple Certified Support Professional Practice Test
← All ACSP Flashcard Decks

Apps and Processes Flashcards

6 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Apps and Processes flashcards as text

  1. A user reports that a specific application becomes unresponsive, showing the spinning beach ball cursor whenever they try to use it. The rest of the system is working normally. Which of the following is the MOST appropriate first step to terminate ONLY the problematic application without affecting other running apps?

    Answer: Press Option-Command-Escape to open the Force Quit Applications window.

    Pressing Option-Command-Escape opens the Force Quit Applications window, which allows a user to select and terminate a single, unresponsive application. This is the standard, user-friendly method for handling a single misbehaving app. Holding the power button forces a hard shutdown of the entire system. The `killall` command without a specific process name is not a valid or safe operation, and quitting 'kernel_task' can cause system instability as it's a core system process.

  2. A support professional is analyzing system performance in Activity Monitor and wants to understand the relationship between different processes. They suspect a helper tool is being launched by a main application. How can they change the view in Activity Monitor to see these parent-child process relationships?

    Answer: Select 'All Processes, Hierarchically' from the View menu.

    The 'All Processes, Hierarchically' view in Activity Monitor is specifically designed to show the parent-child relationships between processes. This allows an administrator to see which processes were launched by others, which is useful for troubleshooting. The other options provide different types of information but do not display this hierarchical structure.

  3. Which macOS security technology is primarily responsible for ensuring that an app downloaded from outside the Mac App Store has been checked by Apple for known malicious content and has not been altered?

    Answer: Gatekeeper

    Gatekeeper is the macOS security feature designed to ensure that only trusted software runs on a Mac. When a user opens an app downloaded from outside the App Store, Gatekeeper verifies that it's from an identified developer and has been notarized by Apple, which is a process that scans for malicious content. App Sandbox contains apps to limit potential damage, FileVault encrypts the disk, and XProtect is the anti-malware technology that Gatekeeper uses, but Gatekeeper is the overarching system that performs the check at launch time.

  4. A developer is creating a new macOS application that will be distributed on the Mac App Store. To comply with store requirements and enhance security, the app must be contained so it can only access system resources and user data that it has explicitly been granted permission for. Which technology must the developer implement?

    Answer: App Sandbox

    The App Sandbox is an access control technology that is mandatory for all apps distributed through the Mac App Store. It restricts an app's access to system resources and user data, containing the potential damage if the app is compromised. While Notarization, Code Signing, and Hardened Runtime are all important security features, the App Sandbox is what specifically creates this restricted container environment.

  5. In the command line, a technician needs to forcefully terminate a non-responsive process with the Process ID (PID) 501. The standard `kill 501` command did not work because the process is ignoring the request. Which command is the most effective next step to immediately stop the process?

    Answer: kill -9 501

    The `kill -9 501` command sends the SIGKILL signal to the process. This is a special signal that cannot be caught or ignored by the process, forcing the kernel to terminate it immediately. The default `kill` command (and `kill -15`) sends a SIGTERM signal, which is a polite request to terminate that can be ignored. `pkill` targets processes by name, not PID, and `kill -1` (SIGHUP) is used to signal a hangup.

  6. A user is trying to run an application downloaded from the internet, but a macOS dialog appears stating, "'AppName' cannot be opened because the developer cannot be verified." What is the underlying cause of this Gatekeeper warning?

    Answer: The application has not been signed with an Apple Developer ID and/or notarized.

    This specific Gatekeeper warning appears when a user tries to open an app that has not been signed by a registered Apple developer and notarized by Apple. Gatekeeper's default policy is to only allow apps from the App Store and identified developers to ensure they have been checked for malicious content. While compatibility, sandboxing, and user privileges are important, they are not the direct cause of this particular verification message.