User Accounts and Security Flashcards
7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 User Accounts and Security flashcards as text
A user reports that after resetting their Mac with Apple silicon, they cannot log in with their existing Apple ID. What is the most likely cause?
Answer: The Mac requires an Activation Lock bypass code from Apple Business Manager
If a Mac is enrolled in Apple Business Manager or School Manager, Activation Lock prevents login until a bypass code is used or the device is released from MDM.
Which command-line tool would a technician use to verify whether a local user account has a Secure Token on macOS?
Answer: sysadminctl -secureTokenStatus
The `sysadminctl -secureTokenStatus ` command reports whether a given user holds a Secure Token.
A Managed Apple ID differs from a personal Apple ID in that it:
Answer: Is created and owned by an organization via Apple Business or School Manager
Managed Apple IDs are provisioned by administrators through Apple Business Manager or Apple School Manager and are owned by the organization, not the individual.
On a shared Mac used by multiple local accounts, a technician notices that only one user can unlock FileVault at startup. What should the technician do to allow a second user to unlock the disk?
Answer: Use `sysadminctl -secureTokenOn ` granting them a Secure Token
A user must have a Secure Token to be listed as a FileVault-enabled user; granting a Secure Token via sysadminctl enables them to unlock the volume at startup.
Screen Time communication limits on a family member's iPhone are managed from the parent's device via Family Sharing. Where are these settings configured on the parent's device?
Answer: Settings > Screen Time > Family > [child's name] > Communication Limits
Parents manage a child's Screen Time Communication Limits from their own device via Settings > Screen Time > the child's name under Family.
A technician needs to bind a Mac to an Active Directory domain so that network user accounts can log in. Which built-in utility is used to configure this binding?
Answer: Directory Utility (Applications > Utilities)
Directory Utility (found in /System/Library/CoreServices/ or via Users & Groups preferences) is the macOS tool for binding to Active Directory and other directory services.
Which macOS feature restricts which apps can access sensitive resources such as the camera, microphone, and contacts by maintaining a database of per-app permissions?
Answer: Transparency, Consent, and Control (TCC)
The TCC (Transparency, Consent, and Control) framework manages and enforces per-app privacy permissions for sensitive data categories like camera, microphone, and contacts.