Apple-Device-Support Apple Device Support Exam (SUP-2026) Questions and Answers

Passkeys use public-private key pairs synced via iCloud Keychain, making them resistant to phishing as they’re site-specific and not entered manually.

Option A: Shared secrets aren’t the mechanism.

Option B: Platform exclusivity isn’t the reason.

Option C: XProtect isn’t involved.

A system extension alert requires user approval in System Settings > Privacy & Security . After installation, macOS prompts to allow the extension; selecting “Allow” (and sometimes restarting) enables it if signed by the developer.

Option A: Safe Mode disables extensions; Control Center doesn’t manage them.

Option B: System Information doesn’t notarize extensions.

Option C: Migration Assistant isn’t for updates.

Click Network in the sidebar, then click Wi-Fi on the right. Scroll down and click Advanced to open the list of known networks.  Click the More button .  next to the network name, then choose Copy Password .

Share disk is a macOS Recovery feature that allows you to share the internal storage of your Mac with Apple silicon as an external drive with another Mac. This feature is useful for transferring files between two Macs, or for troubleshooting issues with your Mac with Apple silicon. Share disk is only available on Mac computers with Apple silicon, and it requires a Thunderbolt or USB cable to connect the two Macs. To use Share disk, you need to start up your Mac with Apple silicon in macOS Recovery, then choose Utilities > Share Disk. On the other Mac, you can access the shared disk from the Finder or Disk Utility.  References : =  Use macOS Recovery on a Mac with Apple silicon ,  How to access macOS Recovery on Apple Silicon M1 Mac ,  Apple Silicon Macs to Feature New Boot and Recovery Interface, New Mac … ,  How to Enter Recovery Mode on a Mac with Apple Silicon

Set your Mac to check for software updates automatically

On your Mac, choose Apple menu > System Settings, then click General in the sidebar. (You may need to scroll down.)

Click Software Update on the right. ...

To set update options, click the Info button for Automatic updates, then do any of the following: ...

Click Done.

https://support.apple.com/guide/mac-help/keep-your-mac-up-to-date-mchlpx1065/mac

AirPrint is an Apple technology that lets you print full-quality photos and documents from your Mac, iPhone, or iPad without the need to download or install drivers. AirPrint features include easy discovery, automatic media selection, and enterprise-class finishing options.  AirPrint is compatible with most popular printer models, including the printers and print servers listed on the Apple Support website 1 .  References :  About AirPrint - Apple Support ,  Printers & Scanners - All Accessories - Apple

 iOS 17 is the latest version of the operating system for iPhone, and it brings new features and enhancements to the devices that support it. However, not all iPhone models are compatible with iOS 17. According to Apple, iOS 17 is compatible with the iPhone XS and newer, meaning that support has been dropped for the iPhone 8, iPhone 8 Plus, and iPhone X. Additionally, some web sources suggest that the iPhone 7 and iPhone 6s are also not compatible with iOS 17, although this has not been officially confirmed by Apple. Therefore, to prepare for the iOS 17 upgrade, you should replace the iPhone 6s and iPhone 7 models in your organization’s inventory, as they are likely to be incompatible with the new software. The iPhone SE (2nd generation) and iPhone SE (3rd generation) are compatible with iOS 17, as they have the same processor as the iPhone 11 and iPhone 13, respectively. The iPhone X is also compatible with iOS 17, as it has the same processor as the iPhone XS.  References :  iPhone models compatible with iOS 17 - Apple Support ,  Will My iPhone Run iOS 17? - MacRumors ,  iOS 17 and iPadOS 17 Are Now Available - How-To Geek ,  iOS 17 Release Date, Compatibility and Confirmed Features from WWDC23

 According to the image you sent, the screen sharing service is disabled because the remote management service is turned on. You can’t have both screen sharing and remote management on at the same time. Remote management allows you to perform more advanced tasks on another Mac, such as installing and configuring apps, helping remote users, and creating detailed reports. Screen sharing allows you to view and control another Mac’s screen. To enable screen sharing, you need to turn off remote management first. You can do this by going to System Settings > General > Sharing and deselecting Remote Management. Then you can check the box next to Screen Sharing to turn it on. Alternatively, you can use Apple Remote Desktop, a commercial app that combines the features of screen sharing and remote management, and works with both Intel-based and Apple silicon Macs.  References :  Turn Mac screen sharing on or off - Apple Support ,  Mac screen sharing won’t work? Disable it! Then turn it back on ,  Revive or restore a Mac with Apple silicon using Apple Configurator - Apple Support

From the sidebar, click  Privacy & Security.   Scroll down, click Lockdown Mode, then click Turn On .

https://support.apple.com/en-us/105120#:~:text=From%20the%20sidebar%2C%20click%20Privacy,Mode%2C%20then%20click%20Turn%20On .

 The Apple Pencil (1st gen) is a stylus that allows you to draw, write, and interact with your iPad in a natural and precise way. The Apple Pencil (1st gen) has a Lightning connector that you can use to pair and charge it with your iPad. It also supports pressure and tilt sensitivity, palm rejection, and low latency. The Apple Pencil (1st gen) is compatible with any iPad that has a Lightning port and supports Apple Pencil.  According to the Apple Device Support Reference Materials 1 , these iPad models are:

iPad Air (3rd gen)

iPad (6th, 7th, 8th, and 9th gen)

iPad Pro 12.9-inch (1st and 2nd gen)

iPad Pro 10.5-inch

iPad Pro 9.7-inch

iPad mini (5th gen)

Therefore, the correct answer is A, C, D, and E.

Turn on Find My Mac in iCloud settings so you can locate, lock, or erase your Mac.

On your Mac, choose Apple menu > System Settings, then click [your name] at the top of the sidebar. ...

Click iCloud on the right, then click Find My Mac.

https://support.apple.com/guide/findmy-mac/set-up-fmm53101237/mac

The first action you should try when an app is unresponsive is to force the app to quit and reopen it. This can help resolve temporary issues that may cause the app to freeze, crash, or not respond to your inputs. To force the app to quit, swipe up from the bottom of the device. If your device has a home button, double press that instead. This will bring up a carousel of all the open windows on your device. Swipe left or right to find the app that you want to quit. Swipe up on the app’s preview to close it. Then, tap the app icon on the Home screen to reopen it and see if it works as expected.  References :  If an app on your iPhone or iPad stops responding … - Apple Support

Fallback recoveryOS is a hidden boot mode on Macs with Apple silicon that allows you to access a second copy of recoveryOS in case the regular one fails. To start up into fallback recoveryOS, you need to shut down your Mac completely, then double-press and hold the power button until you see “Loading startup options” on the screen. Then you can click Options and Continue to enter the recovery utilities window. Fallback recoveryOS is different from regular recoveryOS in that it doesn’t have the capability to change the system security state, so you can’t use Startup Security Utility or disable SIP in this mode.  References :

Use macOS Recovery on a Mac with Apple silicon

Fallback Recovery OS - A Hidden Boot Trick on M1 Macs

Mac Not Booting Into Recovery Mode? 7 Fixes to Try

How to boot an Apple silicon Mac into Recovery mode

How to Enter macOS Recovery Mode on Apple Silicon Macs

 To start up a Mac with Apple silicon in macOS Recovery, you need to access the startup options screen first. This screen lets you choose different startup disks or modes, including macOS Recovery. To get to the startup options screen, you need to shut down your Mac completely, then press and hold the power button until you see “Loading startup options” on the screen.  Then, you can click Options and click Continue to enter macOS Recovery 1 . The other options, pressing and holding the Shift key or Command-R, are not valid ways to start up a Mac with Apple silicon in macOS Recovery.  These methods work on Intel-based Macs, but not on Macs with Apple silicon 2 .  References :  1  Use macOS Recovery on a Mac with Apple silicon - Apple Support  2  Intro to macOS Recovery - Apple Support

The image shows the Emergency SOS screen on an iPhone, which allows you to quickly call emergency services and access your Medical ID. To get to this screen, you need to press and hold the side button and one of the volume buttons until the Emergency SOS slider appears. This works on iPhone 8 and later models. If you continue holding the buttons, a countdown will begin and an alert will sound. At the end of the countdown, your iPhone will automatically call emergency services. Alternatively, you can swipe right on the Emergency SOS slider to call emergency services immediately.  You can also tap the Medical ID button to view or share your medical information, or the cancel button to exit the screen.  References :  1  Use Emergency SOS on your iPhone - Apple Support  2  How to trigger Emergency SOS on your iPhone (and shut it off) - iMore

Network settings is the macOS resource that displays the status of network interfaces in a dynamic list. You can access Network settings from System Preferences > Network, or by clicking the network icon in the menu bar and choosing Open Network Preferences. Network settings shows you the available network interfaces, such as Wi-Fi, Ethernet, Bluetooth, etc., and their connection status, IP address, DNS server, and other information. You can also use Network settings to configure, enable, disable, or troubleshoot your network connections.  References : =  Apple Device Support Exam Prep Guide , page 11;  Apple - Support - Manuals , macOS User Guide, Network preferences.

According to the Apple Device Support Reference Materials, you need your passcode to enable Face ID when:

You have just turned on or restarted your device by force restart or automatically after an OTA software update 1 .

Your device has failed to match a face for 5 times 1 .

You haven’t unlocked your device for more than 48 hours 1 .

The other two options, C and D, are not correct because they are based on incorrect or incomplete information.  The correct condition for option C is that the passcode hasn’t been used to unlock the device in the last six and a half days and Face ID hasn’t unlocked the device in the last 4 hours 1 .  The correct condition for option D is that your device has received a remote lock command 1 .  References :  1 :  Use Face ID on your iPhone or iPad Pro - Apple Support , Section " Require a passcode " .

 Face ID is a biometric authentication feature that allows users to unlock their device with a facial scan. Face ID attempts to match the user’s face with the stored data every time the device is woken up. However, there are situations where Face ID is not permitted or fails to recognize the user. In those cases, the user must enter their passcode or password to unlock the device. One of those situations is when there are five unsuccessful attempts to match a face. After five failed scans, Face ID is disabled and the user is prompted to enter their passcode or password. This is a security measure to prevent unauthorized access to the device by someone who does not look like the user.  References :  Face ID, Touch ID, passcodes, and passwords - Apple Support ,  What Is Face ID? - How-To Geek

WPA3 Enterprise is a wireless authentication method that allows a Mac to use digital certificates to authenticate to secure wireless networks. WPA3 Enterprise provides stronger confidentiality protections for traffic sent over the air, using 256-bit AES encryption when connecting to compatible wireless access points. WPA3 Enterprise also supports 802.1X authentication protocols, such as EAP-TLS, which use digital certificates to verify the identity of the client and the server. WPA3 Enterprise is supported on Mac computers (late 2013 or later, with 802.11ac or later).  References :

Secure access to wireless networks

How Apple devices join Wi-Fi networks

 Sysdiagnose log files are located on iPhone in Settings > Privacy & Security > Analytics & Improvements > Analytics Data. Sysdiagnose is a tool that collects information from the iPhone and saves it in a log file. You can use sysdiagnose to troubleshoot general iOS issues or report them to AppleCare. To generate a sysdiagnose log file, you need to press and hold both volume buttons and the side or top button for 1 to 1.5 seconds, then release them. You will see a screenshot and a message that says “Diagnostics are in flight”. Sysdiagnose can take up to 10 minutes to finish. After that, you can find the log file in the Analytics Data section of the Settings app. The log file name will start with “sysdiagnose_” and include the date and time of the generation, the device type, and the iOS version. For example, “sysdiagnose_2024.01.06_17-14-34+0500_iPhone_OS_iPhone_19A344.tar.gz”.  References :  Using Sysdiagnose to Troubleshoot iOS or iPadOS — Apple Device Support Tutorials | Apple Training ,  How to extract sysdiagnose logs for forensic purposes on iOS | Andrea Fortuna

If a revive is unsuccessful, you can use Apple Configurator to restore the Mac. A restore updates the firmware, updates recoveryOS to the latest version, and erases and installs the latest version of macOS on your internal storage. When this process is complete, any data on any internal volumes is unrecoverable. You must restore the firmware and erase the internal flash storage if reviving the firmware is unsuccessful or if you can’t start the Mac from the startup volume or the recoveryOS.  References :  Revive or restore a Mac with Apple silicon using Apple Configurator - Apple Support

If an app on your iPhone stops responding, closes unexpectedly, or won’t open, one of the possible solutions is to force the app to close and reopen the app. This can help clear any temporary issues that may cause the app to malfunction. To force the app to close, you need to swipe up from the bottom of the screen until all running app cards appear, then swipe up on the app card to quit the app. To reopen the app, you need to tap the app icon on the Home Screen or in the App Library. The other options are not recommended as the first steps to troubleshoot an unresponsive app, as they may have unwanted consequences or not address the root cause of the problem.

Deleting the app and redownloading it from the App Store may result in losing data that was stored in the app, and it may not fix the problem if the app is incompatible with your device or software version.

Resetting all settings will erase all your customized settings, such as network, privacy, accessibility, and general preferences, and restore them to the default values. This may not fix the problem if the app is corrupted or has a bug.

Restarting the device may help resolve some minor glitches, but it may not fix the problem if the app is conflicting with another app or service, or if the app needs an update.  References :

Apple Device Support Exam Prep Guide , page 9

If an app on your iPhone or iPad stops responding, closes unexpectedly, or won’t open

Antonio can’t fast charge his iPhone 14 Pro Max using his 5W USB power adapter because it doesn’t support the USB Power Delivery (USB-PD) protocol that enables fast charging.  To fast charge his iPhone 14 Pro Max, he needs a 20W or higher power adapter that supports USB-PD, such as the Apple 20W USB-C Power Adapter 1  or a comparable third-party adapter.  With a 20W or higher power adapter, he can charge his iPhone 14 Pro Max up to 50% battery in around 30 minutes 2 .  Fast charging is supported on all iPhone 14 models, as well as iPhone 13, iPhone 12, iPhone 11, iPhone SE (2nd generation), iPhone X, iPhone 8, and later models 2 .  References :  Apple 20W USB-C Power Adapter - Apple ,  Fast charge your iPhone - Apple Support

An IP address that starts with 169.254 is called a link-local address. It is assigned by the operating system when the DHCP client cannot contact a DHCP server to obtain a valid IP address. This may indicate a problem with the DHCP server, the network connection, or the DHCP client configuration. A link-local address is not routable and cannot communicate with devices outside the local network segment.  References : =  Troubleshoot problems on the DHCP server ,  Windows 10 not getting IP address from DHCP ,  Fix duplicate IP address conflicts on a DHCP network ,  DHCP client may fail to obtain a DHCP-assigned IP address ,  Setting IP Address Using DHCP Server

 Before you can access the macOS Recovery options on a Mac with Apple silicon that has FileVault or Activation Lock turned on, you must first authenticate as an administrator. This is because FileVault and Activation Lock are security features that encrypt your data and prevent unauthorized access to your Mac. To authenticate as an administrator, you need to select one of the displayed administrator accounts on the startup options screen, then enter the account’s password. This will unlock the system and allow you to use the macOS Recovery apps and utilities. The other options are not correct. You do not need to access the Startup Security Utility or enter the FileVault recovery key or the Apple ID and two-factor authentication to reach the macOS Recovery options.  References :  Use macOS Recovery on a Mac with Apple silicon - Apple Support ,  How to Enter macOS Recovery on an Apple Silicon Mac - MUO

Windows Migration Assistant is a software that helps you transfer your contacts, calendars, email accounts, and more from your Windows PC to your Mac. It copies but does not delete files from your PC. You need to download and install the appropriate version of Windows Migration Assistant on your PC, depending on which macOS your Mac is using. Then you need to connect your Mac and PC to the same network, such as your home Wi-Fi network or an Ethernet cable. Finally, you need to use Migration Assistant on both your Mac and PC to start the transfer process.  References : =  Transfer from PC to Mac with Migration Assistant ,  Download Windows Migration Assistant v2.4.5.0 (Monterey, Ventura and Sonoma)

 When you use Migration Assistant to transfer content from one Mac to another Mac, and the account names are the same on both computers, you have two options: rename or replace. Rename means that the account on your old Mac will appear as an additional user on your new Mac, with a separate login and home folder. Replace means that the account on your old Mac will replace the identically named account on your new Mac. This option will overwrite any existing data on the new Mac account. You can choose the option that suits your needs best.  References :  Transfer to a new Mac with Migration Assistant - Apple Support ,  Migration Assistant and User Names - Apple Community

This is the correct answer because these are the four folders that normally appear at the root level of the storage volume in the Finder on a Mac. The root level is the topmost level of the filesystem hierarchy, denoted by /. The Applications folder contains all the applications installed on the Mac, the Library folder contains system and user preferences, the System folder contains the operating system files, and the Users folder contains the home folders of each user account. These folders are essential for the functioning and organization of the Mac, and they should not be modified or deleted without a good reason.  References :  Access the Root Directory in Mac OS X in 4 Ways Quickly ,  Unix filesystem - Wikipedia ,  Working with APFS Volume Groups | Carbon Copy Cloner - Bombich

These are the correct answers because these are the two authentication methods that users can use to lock a note in the Notes app on their iPad devices. Users can choose to use their device passcode or a custom password for each Notes account. If they use their device passcode, they can also use Face ID or Touch ID to access their locked notes. If they use a custom password, they have to enter it on all devices where they are signed in with the same Apple ID. Users can also switch between the two methods in the Settings app. To lock or unlock a note, users have to tap the three-dotted More button and choose the Lock option, or tap the Lock icon in the top toolbar.  References :  Lock your notes on iPhone - Apple Support (CA) ,  How to lock individual Apple Notes using your iPhone’s passcode - Inverse

Full Disk Access is a high-privilege macOS privacy permission that allows an app to access protected data across the Mac, including information belonging to other apps, Time Machine backups, and certain administrative settings. A standard user does not have the administrative authority required for this type of system-level change, so administrator authorization is required, making option B correct. The restriction is not based on whether the application has sandbox entitlements, and the utility does not first need to be launched by an administrator. Notarization also does not grant Full Disk Access; notarization verifies software integrity and checks for known malicious content, while Full Disk Access is a separate privacy permission. Apple exposes these controls under System Settings > Privacy & Security > Full Disk Access.

================

The macOS Recovery Log records messages generated while the Mac is operating in macOS Recovery. These messages can help troubleshoot recovery-related operations, including system actions associated with installation, recovery, and other utilities. Apple allows the Recovery Log to display errors only, errors and progress information, or all logged messages. This makes option B the appropriate answer. Recovery logs are not limited to hardware failures or kernel panics, and they do not expose user passwords, encryption secrets, or other sensitive security keys. They also are not designed as an iCloud account or device-activation history database. The Recovery Log can be filtered for specific text and saved to a file when detailed troubleshooting information needs to be reviewed or provided to support personnel.

================

On supported Mac computers, Erase Assistant provides Apple’s standard method for returning the Mac to factory settings without manually erasing and reinstalling macOS. In System Settings, go to General > Transfer or Reset > Erase All Content and Settings. This launches Erase Assistant, which signs the user out of Apple services, turns off Find My and Activation Lock, removes installed apps, user accounts, data, and settings, and prepares the Mac for Setup Assistant. Therefore, option D is correct. Safe mode is used primarily for troubleshooting startup and software issues. Recovery Assistant performs recovery-related operations but is not the standard factory-reset utility. Apple Configurator can perform specialized revive and restore operations but is unnecessary when Erase All Content and Settings is supported and available directly in macOS.

================

If macOS is malfunctioning but the user needs to preserve applications, files, and personal data, Reinstall macOS from macOS Recovery is the appropriate option. Apple explicitly states that reinstalling macOS normally does not remove applications or personal data, although creating a backup beforehand is still recommended. Therefore, option C is correct. Startup Security Utility is used to configure startup security policies rather than reinstall the operating system. Disk Utility can diagnose, repair, partition, or erase storage devices but does not itself reinstall macOS. Recovery Assistant provides recovery-related workflows but is not the primary option for reinstalling the operating system while preserving existing user data. Reinstalling from Recovery replaces the operating-system components while leaving the existing data volume intact under normal circumstances.

================

iCloud Backup is available with a personal, unmanaged Apple Account and can also be made available with a Managed Apple Account in supported organizational deployment models. Apple documents that Account-driven Device Enrollment and User Enrollment extend Managed Apple Account services to include contacts, calendars, reminders, notes, iCloud Drive, and iCloud Backup. Therefore, option A is correct. Health and Find My are examples of services that are unavailable to Managed Apple Accounts. Apple One is a consumer subscription bundle and is not a Managed Apple Account service. Organizations can also use Apple Business Manager or Apple School Manager to control which supported iCloud services their Managed Apple Account users can access. This provides organizational control while allowing supported cloud services such as iCloud Backup where appropriate.

================

Starting with iOS 18, iPadOS 18, macOS Sequoia 15, watchOS 11, and visionOS 2, Apple provides Off, Fixed, and Rotating options for Private Wi-Fi Address. Apple documents that when a device joins a new network using WPA2 or stronger security, the Private Wi-Fi Address setting defaults to Fixed. A Fixed private address remains unique to that network but does not periodically rotate. By contrast, when joining a new network that uses weak security or no security, the device defaults to Rotating, which changes the private address every two weeks. MAC address filtering and IP address filtering are network access-control techniques and do not determine the default Private Wi-Fi Address mode. WEP is considered weak security and therefore does not trigger the Fixed default. Thus, WPA2 or WPA3 security is correct.

================

Force Quit immediately terminates the selected application or process instead of allowing it to close normally. Apple specifically warns that if the process has files open, unsaved data may be lost. In addition, if other apps or system processes depend on the process being terminated, those apps or processes can experience problems. This makes option A correct. Force Quit does not reinstall software, and a terminated process is not necessarily prevented from starting again until the Mac restarts. It also does not automatically erase caches or reset application preferences. For this reason, normal Quit should be preferred when an application can respond safely, while Force Quit is intended primarily for unresponsive applications or processes where normal termination is not possible.

================

Managed Apple Accounts are created, owned, and managed by an organization and are specifically designed to keep organizational information separate from a user’s personal data. Therefore, organization data and documents are associated with the Managed Apple Account, making option D correct. Apple’s account-driven enrollment architecture allows a Managed Apple Account and a personal Apple Account to coexist on supported devices while maintaining separation between work and personal information. Personal photos, personally installed applications, and personal account information remain associated with the unmanaged Apple Account unless specifically deployed or managed by the organization. This separation is particularly important in personally owned device deployments because IT management is limited to organizational accounts, managed applications, settings, and information rather than giving the organization unrestricted access to the user’s personal content.

================

Supervision gives an organization additional management control over an iPhone, including control of operating-system update behavior. Apple device management supports declarative software-update configurations that can specify and enforce an operating-system version or schedule updates for managed devices. As a result, a supervised iPhone can receive an organization-enforced software update even when the user has disabled ordinary automatic updates in Settings. Signing in with a Managed Apple Account alone does not explain the forced installation. User Enrollment is designed primarily for personally owned devices and does not provide the same supervision-based control described in the scenario. The fact that the update occurred despite the user’s local automatic-update preference indicates that the software-update process was being controlled by the organization’s device management service. Therefore, option D is correct.

================

Gatekeeper is designed to help ensure that only trusted software runs on a Mac. For software downloaded from outside the App Store, Gatekeeper checks factors such as developer identification, notarization, and whether the software has been altered. Apple also documents that Gatekeeper requests user approval before downloaded software is opened for the first time and tracks the provenance, or origin, of files written by downloaded software. That combination matches option D. Gatekeeper does not automatically reject all software distributed outside the App Store because appropriately signed and notarized applications from identified developers can run. Apple also does not simply review unsigned software as described in option C. Gatekeeper combines code-signing validation, notarization checks, provenance tracking, and first-launch user approval to reduce the risk of users unintentionally executing unsafe software.

================

Location Services allows apps, websites, and system services to use information from GPS, Bluetooth, Wi-Fi, cellular networks, and other sources to determine the device’s location. Apple explicitly warns that turning off Location Services causes many important iPhone features to stop working. Individual applications can depend on location information for navigation, nearby recommendations, weather, transportation, location-based reminders, and other personalized functionality. Therefore, some apps cannot provide their complete feature set when Location Services is disabled, making option C correct. This behavior is not limited to supervised devices or Apple-developed applications. Third-party applications can also request location permission. Location Services therefore affects substantially more than Find My or device tracking; it is an operating-system privacy framework used by many applications and system services.

================

A Mac system report contains detailed information about the computer’s hardware, network connections, operating system, applications, and other configuration information. Apple specifically states that if you contact Apple Support, providing a copy of the system configuration can assist the support technician. Therefore, option D is correct. A system report does not automatically diagnose and report every damaged hardware component, and it does not grant Apple Support remote access to the Mac. It also does not encrypt and upload all user data to iCloud. The report is instead a structured collection of technical configuration details that can help support personnel understand the Mac environment and isolate possible causes of an issue. System Information allows a user to view, save, print, or send the report when troubleshooting assistance is required.

================

Managed Apple Accounts are specifically designed for organizational environments and integrate with account-driven device management enrollment. Apple documents that account-driven User Enrollment and account-driven Device Enrollment allow users to enroll devices for work by signing in with a Managed Apple Account. The Managed Apple Account establishes the organizational identity used during service discovery, authentication, and enrollment. A personal or unmanaged Apple Account does not provide this account-driven organizational enrollment capability. Therefore, option D is correct. Consumer services such as Apple Music are associated primarily with personal Apple Accounts, while some communication services available to ordinary Apple Accounts do not define the organizational capability being tested. Managed Apple Accounts are specifically integrated with Apple Business Manager, Apple School Manager, and compatible device management services to support managed work configurations and organizational data separation.

================

Console is a macOS diagnostic utility used to view log messages, reports, and analytics information generated by the operating system and applications. When an app quits unexpectedly, macOS can generate diagnostic or crash-related information that helps identify what happened around the failure. Apple documents that Console can display analytics information related to events such as applications quitting unexpectedly, forced application termination, and system errors. Therefore, reviewing log data for apps that unexpectedly quit is the correct use described in option D. Console does not dynamically reallocate memory to applications, terminate CPU-intensive background processes automatically, or function primarily as a cache-management utility. Those activities involve other macOS components or tools. Console’s key troubleshooting value is providing diagnostic evidence that can help correlate errors, crashes, and abnormal application behavior.

================

Apple supports two standard manual methods for updating iOS or iPadOS. Directly on the device, open Settings > General > Software Update and download and install the available update, making option B correct. A user can also connect the iPhone or iPad to a trusted Mac running macOS Catalina or later, select the device in Finder, choose General, and select Check for Update, making option C correct. There is no separate iOS or iPadOS Update application, and operating-system updates are not initiated from the App Store. Another iPhone or iPad cannot function as the update host in the manner described in option D. Finder provides the supported computer-based update path when a wireless update is unavailable or when updating through a Mac is preferred.

================

A device management service can configure and enforce FileVault on managed Mac computers, making option C correct. Apple provides FileVault device-management payloads that can enable FileVault, control when users are prompted to activate it, specify deferral behavior, and escrow recovery keys to the organization’s management service. FileVault encrypts the Mac startup volume and protects stored data from unauthorized access. Recovery keys are generally escrowed to the device management service rather than to an individual user’s iCloud account. Modern Apple silicon security also does not rely on administrators remotely configuring traditional firmware passwords in the manner described in option B. Likewise, FileVault does not encrypt the disk using an organization signing certificate. The supported administrative security capability among the choices is enabling and managing FileVault.

================

Restoring an iPhone or iPad from an iCloud backup depends on a stable and functioning network connection because backup content must be retrieved from iCloud. When problems occur during an iCloud backup or restore process, Apple recommends verifying network connectivity and, where appropriate, trying another Wi-Fi network. Therefore, option C is the appropriate troubleshooting action. DFU mode is a substantially different recovery procedure and is not the normal response to an iCloud restore error. Turning off Find My or signing out of the Apple Account also does not address a network-related restore failure and can interfere with access to the backup. Using another reliable Wi-Fi network helps determine whether the failure is being caused by the current network, router configuration, filtering, or internet connectivity.

================

System Integrity Protection (SIP) is a macOS security technology that limits what even the root user can modify or control in protected parts of the operating system. Apple specifically documents that SIP helps prevent software from selecting a startup disk, which makes option C the correct choice. SIP does not block ordinary user activities such as downloading files from external storage, installing approved App Store software, or saving documents outside the user’s home folder. Its purpose is to protect critical system locations and security-sensitive operations from unauthorized modification, including actions performed by processes running with elevated privileges. This protection reduces the ability of malicious software to alter essential macOS components or redirect startup behavior. Therefore, permitting software to select a startup disk is the action restricted by SIP.

================

Restoring an iPhone through Finder on a Mac performs a computer-based factory restore. Apple states that this process erases the device and installs the latest available iOS software, so option D is correct. This differs from Erase All Content and Settings performed directly on the iPhone, which removes user content and settings but is not the method identified here for reinstalling the latest operating-system software. Recovery Assistant is intended to resolve certain startup problems and is not the standard full factory-restore method described in the question. Erasing a device through Find My remotely removes content but does not represent the Finder-based operating-system reinstall process. In Finder, selecting the iPhone and choosing Restore iPhone causes the computer to erase the device and install the latest compatible iOS release.

================

To return an iPhone to factory settings from the device itself, use Erase All Content and Settings. Apple places this option under Settings > General > Transfer or Reset iPhone. It removes the user’s personal information, apps, and settings and returns the device to the setup state, so option A is correct. Reset All Settings is different: it returns many system settings to their defaults but does not erase personal data, apps, photos, messages, or documents. “Device Wipe” is not the user-facing iPhone setting used for a local factory reset, and Return to Service is a managed-device workflow rather than the standard Settings option for an individual user. Therefore, Erase All Content and Settings is the appropriate selection when the requirement is to restore the iPhone to factory settings.

================

A captive Wi-Fi network requires a user to interact with a webpage before normal internet access is granted. The page may require accepting terms and conditions, entering credentials, or making a payment. Apple specifically describes captive Wi-Fi networks as networks that require users to agree to terms or provide payment through a website before internet access becomes available. They are commonly found in coffee shops, hotels, airports, libraries, and other public locations. A network being “public” or “guest” does not by itself mean that it uses a web-based authentication portal. “Captive” specifically identifies this access mechanism. Therefore, the coffee-shop network described in the scenario is a captive network, making option B correct.

================

When an iPad cannot join a password-protected Wi-Fi network, one of the first basic checks is to verify that the correct network password is being entered. Apple notes that Wi-Fi passwords are case-sensitive, so incorrect capitalization or characters can prevent authentication. If the correct credentials still fail, additional network-level troubleshooting or assistance from the organization’s network administrator may be necessary. Auto-Join controls whether a previously known network is joined automatically; it does not correct authentication failure. Restarting can be useful later in troubleshooting, but it does not replace verifying credentials. WPA3 Enterprise configuration is controlled by the network administrator rather than the iPad user. Therefore, confirming the correct Wi-Fi password before escalation is the appropriate action.

================

A functioning network connection is required for an iPad to upload its backup to iCloud. Apple documents that automatic iCloud backups normally occur when the device is connected to power, locked, and connected to Wi-Fi. Consequently, if an iCloud backup fails, confirming that the iPad has a working Wi-Fi connection is an appropriate troubleshooting step. Bluetooth is not required for iCloud Backup. The device also does not need to remain unlocked; automatic backups are specifically designed to occur while it is locked. Signing in with a Managed Apple Account is not the general solution to a failed backup because the relevant Apple Account and organizational configuration depend on how the device is deployed. The network connection must be functional so the backup data can communicate with Apple’s iCloud services.

================

Turning on Location Services allows apps, websites, and Apple system services to request permission to use location information, making option D correct. Location Services can determine a device’s position using sources such as GPS, Wi-Fi, Bluetooth, and cellular information, but enabling the feature does not simply grant every app unrestricted access. Apps must request permission, and the user can allow, deny, or limit access through Privacy & Security settings. The setting also does not automatically enable Wi-Fi and Bluetooth solely for location determination, nor does it restrict location use only to Apple services. Apple gives users control over individual app and system-service access, including options such as precise location where applicable. Thus, enabling Location Services makes location access available subject to user permission rather than automatically exposing location or other data.

================

Apple distinguishes iCloud backups from computer backups by what they contain and where they are stored. An iCloud backup contains information and settings on the device that are not already synchronized to iCloud. For example, information already maintained through services such as iCloud Photos, Contacts, or other enabled iCloud synchronization services generally does not need to be duplicated in the iCloud backup. A backup created on a Mac or PC contains almost all of the device’s locally stored data and settings, although Apple lists specific exclusions such as Face ID or Touch ID settings and Apple Pay information. Encrypted computer backups can additionally preserve sensitive information such as Health, Activity, and Keychain data. Therefore, option D most accurately states the difference between the two backup methods.

================

When a user cannot log in and has started the Mac in macOS Recovery, Apple provides a password-reset workflow through Terminal. From the Utilities menu, open Terminal, type the command `resetpassword`, and press Return. This launches the Reset Password assistant, where the user can follow the available recovery steps and create a new login password. Therefore, option B is correct; the command is properly written as `resetpassword` without a space. The `passwd` command is not the Apple-documented Recovery workflow for this scenario. Disk Utility is used primarily for storage and file-system tasks, and changing Secure Boot settings does not reset a local user password. The Recovery password assistant is specifically designed to handle forgotten or unusable Mac login passwords when normal sign-in is unavailable.

================

A flashing folder with a question mark indicates that the Mac cannot find an available startup disk containing a working macOS installation. Apple’s documented troubleshooting procedure is to start the Mac in macOS Recovery and open Disk Utility. Disk Utility can then be used to locate the startup storage device and run First Aid to check and repair its file system. Therefore, option D is correct. Apple Diagnostics focuses primarily on identifying hardware faults and is not the first Recovery utility specified for this startup-screen condition. Startup Security Utility manages security policies and boot-security options, while Share Disk allows files to be transferred between Mac computers. If Disk Utility cannot repair or detect the startup disk, additional recovery, reinstallation, erasure, or hardware service may subsequently be required.

================

If “Install macOS updates” is off in System Settings > General > Software Update > Automatic Updates , the Mac won’t upgrade automatically.

Option A: Volume owner isn’t a macOS concept here.

Option B: Secure token isn’t for updates.

Option D: Download-only doesn’t stop install.

Passkeys (passwordless authentication) require:

B: Two-factor authentication for Apple Account security.

D: iCloud Keychain to store and sync passkeys across devices.

Option A: App-Specific Passwords are for third-party apps, not passkeys.

Option C: Legacy Contact is for data inheritance, unrelated.

iCloud backups require the device to be on Wi-Fi, locked, and charging—ensuring minimal disruption.

Option A: Full charge isn’t needed; iCloud Backup is in Settings > [user name] > iCloud .

Option C: Unlocked prevents backup.

Option D: No “General > Backup” path.

MDM restrictions on organization-owned iPhones can disable Erase All Content and Settings to prevent unauthorized wipes.

Option B: Software issues don’t dim options.

Option C: iOS version doesn’t affect this.

Option D: All modern iPhones support it.

Universal Clipboard (copy on one device, paste on another) is a Continuity feature requiring same Apple Account and Wi-Fi/Bluetooth.

Option A: iCloud Keychain is iCloud-based, not Continuity.

Option B: Notifications sync but aren’t Continuity.

Option D: Siri is standalone.

Activity Monitor allows running system diagnostics via View > Run System Diagnostics , generating a report for troubleshooting (saved in /var/tmp).

Option B: Console views logs, not runs diagnostics.

Option C: Feedback Assistant submits issues, not runs diagnostics directly.

Option D: Diagnostic Reporter isn’t a macOS app.

The Activity Monitor Dock icon can display real-time Network Usage (e.g., data sent/received) if set in View > Dock Icon .

Option A: Storage is in System Settings > General > Storage.

Option B: Wi-Fi details are in Network settings.

Option D: Hardware is in System Information.

In Settings > Wi-Fi , tapping a network’s info (i) shows the Auto-Join toggle. Disabling it prevents the iPhone from automatically connecting to that network, even if previously joined.

Option A: Ask to Join Networks prompts for new networks, not known ones.

Option B: Auto-Link isn’t an iOS setting.

Option C: Preferred Networks isn’t a toggleable option.

Option-clicking the Wi-Fi menu bar icon shows detailed connection info (e.g., IP, channel).

Option B: System Settings doesn’t respond this way.

Option C: Control-click offers basic options.

Option D: Control-click in Settings doesn’t detail this.

Private Wi-Fi Address (Settings > Wi-Fi > [network] > i) randomizes the MAC address per network. If the organization uses MAC filtering (allowing specific addresses), a randomized MAC prevents connection.

Option A: Limits IP tracking, not MAC.

Option C: Low Data Mode restricts data, not connectivity.

Option D: Location Services doesn’t affect MAC.

WPA3 Enterprise supports digital certificates for authentication, ideal for secure organizational networks, unlike personal modes.

Option B: WPA Personal uses passwords.

Option C: WPA3 Personal uses passwords, not certificates.

Option D: Transitional is a hybrid, not certificate-based.

Encrypted iPhone backups to a Mac (via Finder or iTunes) include additional sensitive data that unencrypted backups exclude for security. The two data types exclusive to encrypted backups are:

Health data (C): Includes Health app records (e.g., steps, heart rate), requiring encryption due to privacy laws like HIPAA.

Saved passwords (D): Includes Wi-Fi passwords and website credentials stored in Keychain, protected by encryption.

Option A (Device passcode) isn’t backed up; it’s a user-set code, not data.

Option B (Face ID) settings aren’t backed up; biometric data is hardware-bound.

Option E (Wallet) backups include card details only with encryption, but it’s not exclusive—other Wallet data syncs via iCloud. Apple confirms this in " About encrypted backups on your iPhone " (support.apple.com/HT205220).

In Settings > Privacy & Security > Location Services , toggle “Precise Location” off per app to limit to approximate location.

Option A: General doesn’t host this.

Option B: Apps don’t edit this internally.

Option C: Reinstalling resets, not limits.

With FileVault enabled, macOS Recovery requires unlocking the encrypted disk by selecting an admin user and entering their password at startup.

Option A: Disk Utility mounting isn’t the initial step.

Option C: MFA isn’t used here.

Option D: Recovery Lock is MDM-specific, not FileVault.

On a Mac, Activity Monitor is the primary tool for monitoring system resource usage, including the amount of memory (RAM) consumed by individual apps. Found in Applications > Utilities, it provides a real-time view under the " Memory " tab, showing memory usage in megabytes or gigabytes per app, along with system-wide statistics.

Option A (Console) logs system events and errors but doesn’t display memory usage.

Option B (Apple Diagnostics) tests hardware integrity, not runtime memory stats.

Option C (System Information) offers hardware and software details (e.g., total RAM) but not per-app memory usage.

Option D (Activity Monitor) is correct and widely used for this purpose. This functionality remains consistent in macOS up to 2025. Refer to Apple’s " Use Activity Monitor on your Mac " (support.apple.com/HT201464) for details.

A folder with a question mark means the Mac can’t find a valid macOS system on any startup disk, often due to corruption or erasure.

Option B: Server verification isn’t indicated this way.

Option C: Internet Recovery failure shows a globe.

Option D: Encryption prompts for a password, not this symbol.

In System Settings > Network > Ethernet > Details , the DNS tab lets you remove manual DNS entries on macOS.

Option A: No “DNS Management” exists.

Option B: “Advanced” was pre-Ventura; now it’s “Details.”

Option C: No “Restore Defaults” option.

To start Apple Diagnostics on a Mac, shut it down, then press the power button and immediately hold Command-D until diagnostics begin (progress bar appears). This works on Intel and Apple silicon Macs (post-startup options on silicon).

Option A: Option-D starts Internet Diagnostics (older Macs), not standard Diagnostics.

Option B: Command-Option-D isn’t a valid combo.

Option D: Shift-D isn’t used.

The Hover Text accessibility feature on macOS enlarges text under the pointer when activated, aiding users with visual impairments. Enabled in System Settings > Accessibility > Display > Hover Text , it displays a magnified text box when hovering over items, with customizable size and activation (e.g., holding Command).

Option A (VoiceOver) narrates screen content but doesn’t enlarge text on hover.

Option B (Zoom) magnifies the entire screen or a portion, not specifically text under the pointer.

Option C (Pointer Control) adjusts pointer behavior, not text size.

Option D (Hover Text) matches the description precisely. Introduced in macOS Mojave and refined by 2025, see Apple’s " Use Hover Text on Mac " (support.apple.com/HT211100).

Insufficient storage (e.g., < 5GB free) prevents iPadOS updates, as they require space for download and installation (check in Settings > General > iPad Storage ).

Option A: Cellular can work if “Use Cellular Data” is on.

Option B: < 50% battery prompts charging, not blocks visibility.

Option D: Purchase History isn’t tied to updates.

The Zoom accessibility feature on macOS enlarges the screen view, making content larger for better visibility. Found in System Settings > Accessibility > Zoom , it offers options like full-screen zoom, picture-in-picture, or split-screen magnification, activated via keyboard shortcuts (e.g., Option-Command-8) or a trackpad gesture.

Option A (Increase Transparency) adjusts UI clarity, not size.

Option B (Zoom) is the correct feature for screen enlargement.

Option C (Assistive Touch) is an iOS feature, not macOS.

Option D (Magnifier) exists on iOS/iPadOS, not as a distinct macOS feature (Zoom serves this purpose). Details are in Apple’s " Use Zoom on your Mac " (support.apple.com/HT210978).

iCloud backups include app settings, Home configuration, and Apple Watch backups (via paired iPhone), but Face ID settings are excluded as biometric data is hardware-bound.

Option A: App settings are backed up.

Option B: Home data syncs via iCloud.

Option C: Watch backups are included.