ACSP - Apple Certified Support Professional User Accounts and Security Questions and Answers

Question 1

A user with a standard macOS account is trying to install a new application for all users on their Mac, but is unable to complete the process. What is the most likely reason for this issue?

Accepted Answer

The user's account is not an administrator account.

Answer

Standard users in macOS have limited privileges. They can install applications for their own use and change their own settings, but they cannot install applications for all users or make system-wide changes. These actions require administrator privileges.

Question 2

A support professional is setting up a new Mac for a user who will be working with sensitive data. To provide an additional layer of security that requires a password to access the data even if the drive is physically removed, which feature should be enabled?

Accepted Answer

FileVault

Answer

FileVault is a full-disk encryption feature in macOS. When enabled, it encrypts the entire contents of the startup disk. This means that even if the physical drive is removed from the Mac, the data cannot be accessed without the user's login password or a recovery key.

Question 3

Which of the following user account types in macOS is designed specifically to allow remote access to shared files without providing the ability to log in to the computer directly?

Accepted Answer

Sharing Only

Answer

A 'Sharing Only' account is a special type of user account that can be used to access shared files over a network. Users with this type of account cannot log in to the Mac's desktop or change system settings.

Question 4

A user reports that they are repeatedly prompted for their password when trying to make changes in System Settings, even for minor adjustments. They are the only user on the Mac. Which of the following is the BEST first step to troubleshoot this issue?

Accepted Answer

Verify the user account is an administrator account.

Answer

The first account created on a Mac is an administrator account, but it's possible for this to be changed. A standard user will be prompted for an administrator's name and password to make system-wide changes. Verifying that the user's account type is still set to 'Administrator' in Users & Groups settings is the most logical first step.

Question 5

A Mac administrator needs to create a new standard user account from the command line. Which command-line utility is the Apple-recommended tool for this task, especially when FileVault is in use?

Accepted Answer

sysadminctl

Answer

While 'dscl' can be used for user management, 'sysadminctl' is the recommended command-line tool for creating and managing users, particularly in environments where FileVault is enabled. Using 'sysadminctl' ensures that the new user account is properly configured with a Secure Token, which is necessary to interact with FileVault.

ACSP - Apple Certified Support Professional Practice Test

ACSP - Apple Certified Support Professional Practice Test

ACSP - Apple Certified Support Professional User Accounts and Security Questions and Answers