ACSP User Accounts and Security 5

Question 1

A user's iCloud Keychain is not syncing to a newly set up Mac. After confirming the same Apple ID is signed in, what is the next most likely step to resolve the issue?

Accepted Answer

Ensure iCloud Keychain is toggled on in System Settings > Apple ID > iCloud

Answer

iCloud Keychain must be explicitly enabled per device in System Settings (or System Preferences) under Apple ID > iCloud; it does not enable automatically when signing in.

Question 2

An administrator wants to prevent a standard user from changing their own account password on macOS. Which tool allows this restriction to be applied locally?

Accepted Answer

Parental Controls (Screen Time) with the password change option disabled

Answer

Screen Time (formerly Parental Controls) includes a Content & Privacy setting that can prevent a managed user from changing their account password.

Question 3

When configuring a login window to display a list of users rather than username and password fields, which setting is adjusted?

Accepted Answer

Terminal: sudo defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool false

Answer

The `defaults write` command for `SHOWFULLNAME -bool false` on com.apple.loginwindow switches the login window from name/password fields to a clickable list of users.

Question 4

A technician is troubleshooting why an APFS volume's FileVault recovery key cannot be used. The user insists the key was saved during setup. What is a common reason the personal recovery key fails?

Accepted Answer

The key was generated for a different volume or a prior FileVault enablement

Answer

If FileVault was turned off and re-enabled, a new recovery key is generated; any previously saved key is no longer valid for the current encryption state.

Question 5

Which macOS security feature prevents modification of system files and directories even by the root user, and must be disabled in recoveryOS to allow certain low-level changes?

Accepted Answer

System Integrity Protection (SIP)

Answer

System Integrity Protection (SIP) restricts root-level modifications to protected system paths and can only be disabled by booting into recoveryOS and running `csrutil disable`.

ACSP - Apple Certified Support Professional Practice Test

ACSP - Apple Certified Support Professional Practice Test

ACSP User Accounts and Security 5