Apple Certified Support Professional (ACSP) — Questions and Answers

Question 1: A user reports that their Mac connects to the corporate VPN successfully but cannot reach internal servers by hostname, only by IP. What is the most likely cause?

The VPN tunnel is using split tunneling
IPv6 is conflicting with the VPN's IPv4 tunnel
The VPN is not pushing internal DNS server settings to the Mac (Correct answer)
The Mac's firewall is blocking DNS queries

Correct answer: The VPN is not pushing internal DNS server settings to the Mac

When the VPN does not push internal DNS server addresses, the Mac continues using its default DNS servers which cannot resolve internal hostnames.

Question 2: What does the 'Secure Empty Trash' feature for external drives ensure before disconnecting them from a Mac?

The drive's encryption key is wiped before ejection
Files in Trash from that volume are overwritten before the drive is unmounted (Correct answer)
All cached data is flushed and the partition table is rewritten
Nothing — macOS uses Eject instead of Secure Empty Trash for drives

Correct answer: Files in Trash from that volume are overwritten before the drive is unmounted

When files from an external drive are in the Trash, Secure Empty Trash overwrites them on that volume before permanently deleting them.

Question 3: What is the primary function of XProtect in macOS?

Validating the cryptographic signature of the macOS kernel at each startup
Monitoring network traffic for intrusion attempts and blocking suspicious connections
Preventing apps from accessing the camera and microphone without user permission
Scanning downloaded files and launched apps against a database of known malware signatures (Correct answer)

Correct answer: Scanning downloaded files and launched apps against a database of known malware signatures

XProtect is Apple's built-in, signature-based anti-malware engine. It automatically scans files when they are first downloaded or opened and compares them against an Apple-maintained database of known malware signatures. Apple silently updates XProtect signatures independently of macOS system updates.

Question 4: A user needs to share their Mac's Wi-Fi connection over Ethernet to a device that doesn't support Wi-Fi. Which macOS feature enables this?

Handoff
Internet Sharing (Correct answer)
AirDrop
Personal Hotspot

Correct answer: Internet Sharing

Internet Sharing in macOS allows sharing an active internet connection from one interface (Wi-Fi) to another (Ethernet) to connected devices.

Question 5: A company requires that all employee Mac backups be encrypted. When configuring Time Machine, at which point can encryption be enabled?

When initially selecting the backup disk in Time Machine settings (Correct answer)
Time Machine does not support backup encryption
Encryption must be enabled via Terminal after setup
Only after the first backup completes

Correct answer: When initially selecting the backup disk in Time Machine settings

Time Machine offers an option to encrypt the backup disk when you first select it as the backup destination in System Settings.

Question 6: A networked printer shows as 'offline' in macOS even though it is powered on and reachable via ping. What is the most efficient fix?

Delete and re-add the printer in System Settings
Reset the Mac's printing system and re-add the printer (Correct answer)
Restart the CUPS service with `sudo launchctl stop org.cups.cupsd`
Reinstall the printer's PPD file manually

Correct answer: Reset the Mac's printing system and re-add the printer

Resetting the printing system clears all printers, queues, and settings, then re-adding the printer rebuilds a clean configuration that resolves persistent offline states.

Question 7: Which file system is used by macOS for the primary system volume on Macs with Apple silicon or T2 chips?

ExFAT
HFS+ (Mac OS Extended)
APFS (Apple File System) (Correct answer)
NTFS

Correct answer: APFS (Apple File System)

APFS (Apple File System) is the default and required file system for the macOS system volume on all modern Macs. It was introduced in macOS 10.13 High Sierra and is optimized for SSD storage with features like cloning, snapshots, and strong encryption.

Question 8: Which command would you use to change the ownership of a file to a different user in macOS?

chown newuser filename (Correct answer)
chmod u+newuser filename
chgrp newuser filename
usermod filename newuser

Correct answer: chown newuser filename

`chown` (change owner) sets the user and/or group ownership of a file.

Question 9: A user frequently moves their MacBook between their office, which requires a static IP address and specific DNS servers, and home, which uses DHCP. What is the most efficient method to switch between these network configurations without manual reconfiguration each time?

Use the `networksetup` command in Terminal before browsing.
Create a separate user account for each location.
Write a script to change network settings upon startup.
Create and switch between Network Locations. (Correct answer)

Correct answer: Create and switch between Network Locations.

Network Locations in macOS are designed specifically for this scenario. They allow a user to save entire sets of network interface settings (IP address, DNS, proxies, etc.) and quickly switch between them from the Apple menu or System Settings.

Question 10: Which file system format does Apple recommend when formatting a startup volume for modern macOS installations?

Mac OS Extended (Journaled)
FAT32
APFS (Apple File System) (Correct answer)
ExFAT

Correct answer: APFS (Apple File System)

APFS is Apple's recommended and default file system for startup volumes on modern Macs due to its performance, encryption, and snapshot capabilities.

Question 11: What is Ethernet autonegotiation and what might cause a Mac to connect at a lower speed than the network supports?

Autonegotiation is only available on gigabit switches and is disabled by default on macOS
Autonegotiation is a macOS security feature that reduces Ethernet speed on untrusted networks
Autonegotiation is the process by which macOS selects between Wi-Fi and Ethernet automatically
Autonegotiation allows Ethernet devices to automatically agree on speed and duplex; mismatched settings (one end hardcoded, other auto) cause speed reduction or errors (Correct answer)

Correct answer: Autonegotiation allows Ethernet devices to automatically agree on speed and duplex; mismatched settings (one end hardcoded, other auto) cause speed reduction or errors

Ethernet autonegotiation lets both ends of a link exchange capabilities and agree on the best speed/duplex. If one device is hardcoded to a specific speed/duplex while the other autonegotiates, the result is duplex mismatch — causing severely reduced throughput and errors.

Question 12: What is the purpose of the 'quarantine' extended attribute that macOS assigns to downloaded files?

It flags the file for Gatekeeper review and prompts the user before first launch (Correct answer)
It restricts the file to read-only access
It prevents Time Machine from backing up the file
It encrypts the file until a password is entered

Correct answer: It flags the file for Gatekeeper review and prompts the user before first launch

The com.apple.quarantine extended attribute tells Gatekeeper to inspect and warn the user before allowing a downloaded file to run for the first time.

Question 13: A Mac is experiencing intermittent freezes and application crashes, which are suspected to be caused by a recently installed third-party kernel extension or a corrupt font cache. Which startup mode is the BEST first step for troubleshooting this specific type of issue?

Single-User Mode
macOS Recovery
Target Disk Mode
Safe Mode (Correct answer)

Correct answer: Safe Mode

Safe Mode is the ideal troubleshooting step for this scenario because it starts the Mac with a minimal set of software and services. Specifically, it loads only required kernel extensions, prevents third-party fonts from loading, and clears several system caches, including the font and kernel caches, directly addressing the suspected causes of the problem.

Question 14: A Thunderbolt 3 peripheral is connected to a Mac's Thunderbolt 4 port. What is the expected result?

The peripheral functions normally because Thunderbolt 4 is backward compatible with Thunderbolt 3 (Correct answer)
The peripheral will not function because the protocols are incompatible
The peripheral works but is limited to USB 3.1 speeds only
macOS will prompt the user to update the peripheral's firmware

Correct answer: The peripheral functions normally because Thunderbolt 4 is backward compatible with Thunderbolt 3

Thunderbolt 4 is fully backward compatible with Thunderbolt 3 devices, so they operate at Thunderbolt 3 speeds.

Question 15: What does 'Erase All Content and Settings' do on macOS Monterey and later?

Removes only the current user's account while preserving other user accounts
Deletes all third-party applications while preserving user documents and settings
Performs a full reinstall of macOS from the internet, erasing everything including the OS
Instantly wipes all user data and settings while leaving macOS intact, similar to erasing an iPhone (Correct answer)

Correct answer: Instantly wipes all user data and settings while leaving macOS intact, similar to erasing an iPhone

'Erase All Content and Settings' (in System Settings > General > Transfer or Reset) cryptographically erases all user data and settings on Macs with Apple silicon or T2 chip, returning macOS to a clean first-run state without reinstalling the OS.

Question 16: A system administrator needs to gain secure command-line access to a remote Mac server to run maintenance scripts. Which service must be enabled in the Sharing settings to allow this type of connection?

Remote Login (Correct answer)
File Sharing
Screen Sharing
Remote Management

Correct answer: Remote Login

The 'Remote Login' service in Sharing settings enables the SSH (Secure Shell) daemon. SSH provides an encrypted, secure channel for command-line access over a network, which is the standard method for remote administration via Terminal.

Question 17: How does Bluetooth device pairing work on macOS and what is the difference between 'paired' and 'connected'?

Bluetooth devices must be re-paired every 24 hours for security; connected means the current session is active
Pairing exchanges and stores cryptographic keys between the Mac and device for future trusted connections; 'connected' means the device is actively communicating; 'paired' means it's trusted but may not be actively connected (Correct answer)
Pairing requires a one-time internet activation with Apple's Bluetooth servers; connecting is the daily offline process
Pairing and connecting are identical on macOS; the terms are used interchangeably in Bluetooth settings

Correct answer: Pairing exchanges and stores cryptographic keys between the Mac and device for future trusted connections; 'connected' means the device is actively communicating; 'paired' means it's trusted but may not be actively connected

Bluetooth pairing creates a trusted bond by exchanging and storing link keys — the devices remember each other and skip the pairing process on future connection attempts. 'Connected' means the device is actively passing data; 'paired' means the device is trusted and will auto-connect but may not currently be exchanging data.

Question 18: A user runs `sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder`. What is the purpose of this command sequence?

Flush the DNS cache on macOS (Correct answer)
Restart the directory services daemon
Reset all network interfaces
Clear the ARP table

Correct answer: Flush the DNS cache on macOS

This two-command sequence flushes the DNS cache and restarts mDNSResponder to apply the change on modern macOS.

Question 19: A Mac with Apple silicon displays 'Your disk appears to be damaged' during startup. What is the first recommended step?

Boot to macOS Recovery and run First Aid in Disk Utility (Correct answer)
Initialize the disk from DFU mode
Replace the SSD
Reinstall macOS immediately

Correct answer: Boot to macOS Recovery and run First Aid in Disk Utility

Booting to macOS Recovery and running First Aid in Disk Utility is the first non-destructive step to diagnose and repair file system errors.

Question 20: What happens when you hold Option while clicking 'Force Quit' for an application in macOS?

The app is force-quit and its preference file is automatically deleted
The Relaunch button appears, allowing the app to be immediately restarted after force-quitting (Correct answer)
The app is suspended rather than terminated
A kernel panic report is generated for the crashed app

Correct answer: The Relaunch button appears, allowing the app to be immediately restarted after force-quitting

Holding Option while selecting Force Quit in the Force Quit Applications window changes the button to 'Relaunch,' which force-quits the app and immediately relaunches it — useful for frozen apps you still need to use.

Question 21: A user reports that an app is consuming excessive CPU even when not in use. Which macOS tool best identifies which specific process threads are responsible?

Activity Monitor's CPU tab
Instruments with the Time Profiler template (Correct answer)
Console.app log viewer
System Information app

Correct answer: Instruments with the Time Profiler template

Instruments with the Time Profiler template provides detailed thread-level CPU sampling to pinpoint exactly which code paths are consuming resources.

Question 22: Which macOS feature limits what resources and capabilities an app can access, even if the app's code attempts to access them?

Gatekeeper
FileVault
App Sandbox (Correct answer)
System Integrity Protection

Correct answer: App Sandbox

App Sandbox enforces a security boundary that restricts an app's access to system resources, files, and hardware based on entitlements declared at build time.

Question 23: A user reports their Mac starts up and shows the desktop but the Dock and menu bar never appear. Which step should a technician try first?

Delete and recreate the user account
Reset the SMC
Log out and back in, or force-quit and relaunch the Finder (Correct answer)
Reinstall macOS from Recovery

Correct answer: Log out and back in, or force-quit and relaunch the Finder

The Dock and menu bar are managed by the Finder process; relaunching the Finder via Force Quit is the least destructive first step when the desktop loads but the UI shell is missing.

Question 24: What is the difference between iCloud Backup and iCloud Drive for iOS data protection?

iCloud Backup creates complete device backups of iOS device data and settings; iCloud Drive syncs specific files and folders across devices — they serve different purposes and are independent systems (Correct answer)
iCloud Drive replaces iCloud Backup for all iOS devices running iOS 13 or later
iCloud Backup and iCloud Drive are identical services with different names in different iOS versions
iCloud Backup stores data in iCloud Drive folders and can be browsed like regular iCloud documents

Correct answer: iCloud Backup creates complete device backups of iOS device data and settings; iCloud Drive syncs specific files and folders across devices — they serve different purposes and are independent systems

iCloud Backup creates full device backups (app data, device settings, home screen layout, messages) stored in iCloud. iCloud Drive is a file sync service for documents. They're independent: backup is restorative; Drive is for live file access across devices.

Question 25: What is the purpose of the macOS 'Reinstall macOS' option in Recovery, and does it erase user data?

It reinstalls macOS only if the system files have been verified as corrupt by First Aid
It reinstalls macOS system files while preserving all user accounts, applications, and data (Correct answer)
It performs a clean install that erases all data including user files and third-party apps
It downloads a new macOS version regardless of what is currently installed

Correct answer: It reinstalls macOS system files while preserving all user accounts, applications, and data

'Reinstall macOS' in Recovery replaces only the macOS system files (the System volume) without erasing user data on the Data volume. User accounts, applications, and files are preserved, making it safe to run when macOS itself is broken.

Question 26: Which command-line tool would an ACSP technician use to display the routing table on a Mac?

ifconfig -r
netstat -rn (Correct answer)
route display
networksetup --route

Correct answer: netstat -rn

The `netstat -rn` command displays the kernel routing table with numeric addresses on macOS.

Question 27: What does the 'sudo' command do in macOS Terminal?

Executes the following command with superuser (root) privileges (Correct answer)
Permanently elevates the current Terminal session to admin level
Switches the current user account to another user
Displays a list of commands the current user is allowed to run

Correct answer: Executes the following command with superuser (root) privileges

'sudo' (superuser do) runs the immediately following command with root privileges after authenticating with the current user's admin password. The elevated privilege applies only to that single command.

Question 28: What is AirPrint and how does macOS use it to print without installing drivers?

AirPrint is a USB printing protocol that Apple created to replace older parallel port printing
AirPrint is only available for iOS devices; Macs require traditional printer drivers for all printing
AirPrint is an Apple-exclusive cloud printing service that routes print jobs through Apple's servers
AirPrint is an Apple protocol that enables printing to compatible printers over Wi-Fi or Ethernet using IPP (Internet Printing Protocol) without requiring printer-specific drivers (Correct answer)

Correct answer: AirPrint is an Apple protocol that enables printing to compatible printers over Wi-Fi or Ethernet using IPP (Internet Printing Protocol) without requiring printer-specific drivers

AirPrint uses IPP (Internet Printing Protocol) with DNS-SD for discovery to print to compatible printers over a network without installing drivers. macOS includes built-in support for AirPrint, and most modern network printers support it natively.

Question 29: A Mac user reports they can access websites by IP address but not by domain name. What is the most likely cause?

The Mac's firewall is blocking web browser traffic
The Mac's hosts file is overriding all domain lookups with incorrect entries
DNS resolution is failing — the configured DNS servers are unreachable or returning errors (Correct answer)
The DHCP lease has expired and the Mac has a self-assigned IP address

Correct answer: DNS resolution is failing — the configured DNS servers are unreachable or returning errors

If a Mac can reach servers by direct IP address but not by domain name, DNS lookup is failing. This isolates the problem to DNS: either the DNS servers are down/unreachable, the network is blocking port 53, or DNS settings are misconfigured.

Question 30: Which macOS command-line tool can be used to display detailed information about disk partitions and their GUIDs?

fdisk -l
lsblk
gpt show
diskutil list (Correct answer)

Correct answer: diskutil list

The `diskutil list` command displays all disks and partitions including their types, sizes, and identifiers on macOS.

Question 31: What does `diskutil list` display in macOS Terminal?

Free and used disk space for each volume
SMART status for all connected drives
All attached disks and their partitions with identifiers (Correct answer)
Mounted network shares and local volumes

Correct answer: All attached disks and their partitions with identifiers

`diskutil list` enumerates all disks and their partition schemes, sizes, and BSD device identifiers.

Question 32: A user's iCloud Keychain is not syncing to a newly set up Mac. After confirming the same Apple ID is signed in, what is the next most likely step to resolve the issue?

Reset the SMC on the new Mac
Delete and recreate the user's local Keychain file
Ensure iCloud Keychain is toggled on in System Settings > Apple ID > iCloud (Correct answer)
Disable and re-enable Gatekeeper

Correct answer: Ensure iCloud Keychain is toggled on in System Settings > Apple ID > iCloud

iCloud Keychain must be explicitly enabled per device in System Settings (or System Preferences) under Apple ID > iCloud; it does not enable automatically when signing in.

Question 33: On a Mac with Apple silicon, what does holding the power button until startup options appear allow you to do that was not possible on Intel Macs using the same action?

Clear the NVRAM settings immediately
Force the Mac to boot directly into Target Disk Mode
Trigger an automatic hardware diagnostic test
Access the full Startup Options screen including Recovery, Safe Mode, and volume selection without a keyboard shortcut (Correct answer)

Correct answer: Access the full Startup Options screen including Recovery, Safe Mode, and volume selection without a keyboard shortcut

Apple silicon Macs replace multiple Intel startup key combinations with a single long power-button press that surfaces a unified Startup Options UI.

Question 34: Which Apple platform feature, when combined with MDM, allows an organization to bypass Activation Lock on a supervised device without the user's Apple Account credentials?

Activation Lock bypass code stored by MDM during enrollment (Correct answer)
System Preferences > Apple Account sign-out
Recovery Mode restore
Apple Configurator 2 erase

Correct answer: Activation Lock bypass code stored by MDM during enrollment

When a supervised device enables Activation Lock, the MDM server can store a bypass code that IT can use to clear the lock without knowing the user's Apple Account password.

Question 35: A user's app is listed in Activity Monitor but has been unresponsive for 10 minutes. After using Force Quit, the user asks why the app's data may be lost. What is the correct explanation?

macOS deletes the app container when Force Quit is used
Force Quit requires administrator privileges which bypass file permissions
Force Quit sends SIGKILL, which terminates the process immediately without giving it time to save state (Correct answer)
Force Quit corrupts the app's preference file causing data loss

Correct answer: Force Quit sends SIGKILL, which terminates the process immediately without giving it time to save state

Force Quit sends SIGKILL to the process, which causes immediate termination by the kernel with no opportunity for the app to execute cleanup or save routines.

Question 36: What does the 'Screen Sharing' feature in macOS enable, and what protocol does it use?

Screen Sharing allows remote viewing and control of a Mac's screen from another Mac or VNC client; it uses the VNC (Virtual Network Computing) protocol over TCP port 5900 (Correct answer)
Screen Sharing encrypts the session end-to-end and requires a valid Apple ID on both ends
Screen Sharing only allows viewing the screen remotely, not controlling the keyboard and mouse
Screen Sharing uses Apple's proprietary Remote Desktop Protocol exclusive to macOS and cannot be accessed from Windows or Linux

Correct answer: Screen Sharing allows remote viewing and control of a Mac's screen from another Mac or VNC client; it uses the VNC (Virtual Network Computing) protocol over TCP port 5900

macOS Screen Sharing uses the VNC protocol (port 5900), making it compatible with any VNC client. Apple's own Screen Sharing app and Apple Remote Desktop provide enhanced features, but any VNC client (RealVNC, TigerVNC, etc.) can connect to a Mac with Screen Sharing enabled.

Question 37: Which command-line tool displays the routing table on macOS to help diagnose why traffic is being sent to the wrong gateway?

netstat -rn (Correct answer)
ifconfig
arp -a
ipconfig getpacket en0

Correct answer: netstat -rn

'netstat -rn' prints the kernel routing table, showing destination networks, gateways, and interface assignments without performing DNS lookups.

Question 38: What happens when a Mac enters 'Recovery Mode' versus 'DFU Mode'?

Recovery Mode requires a network connection; DFU Mode works completely offline
Recovery Mode boots a limited macOS environment for repair tools; DFU Mode bypasses all firmware for use with Apple Configurator 2 when Recovery itself is unusable (Correct answer)
Recovery Mode and DFU Mode both provide the same environment, but DFU is faster to access
Recovery Mode erases the Mac; DFU Mode preserves data while reinstalling firmware

Correct answer: Recovery Mode boots a limited macOS environment for repair tools; DFU Mode bypasses all firmware for use with Apple Configurator 2 when Recovery itself is unusable

Recovery Mode boots recoveryOS (a functional minimal macOS environment) for repairs. DFU (Device Firmware Update) Mode is a lower-level state that completely bypasses all software, allowing Apple Configurator 2 to push new firmware to a Mac whose boot system is completely unresponsive.

Question 39: The BetterBag MDM administrator configures Setup Assistant to skip Location Services on a managed iPad. What happens when Location Services is skipped during Setup Assistant?

The user can turn on Location Services.
The user is required to turn on Location Services.
The user can’t configure Location Services. (Correct answer)
The user is prompted to turn on Location Services.

Correct answer: The user can’t configure Location Services.

Explanation: The user can’t configure Location Services if an MDM solution configured Setup Assistant to skip the option. Continue to study resources related to the following learning objective: Identify whether a Setup Assistant screen on iPhone, iPad, or Mac is skipped due to MDM.

Question 40: What happens to a file's data when it is moved to the Trash on an APFS volume and then the Trash is emptied?

The file's space is marked as free but data may persist until overwritten (Correct answer)
The data blocks are immediately overwritten with zeros
APFS encrypts the blocks to prevent recovery
The file is moved to a hidden recovery partition

Correct answer: The file's space is marked as free but data may persist until overwritten

Emptying the Trash marks the file's storage blocks as available but does not immediately overwrite the data, so forensic tools may recover it.

Question 41: How does Time Machine determine which files to back up in each hourly backup?

It backs up all files modified in the last 24 hours regardless of previous backups
It scans the entire drive alphabetically and checks modification dates
It compares a full MD5 hash of every file against the previous backup
It uses FSEvents to track files that have changed since the last backup (Correct answer)

Correct answer: It uses FSEvents to track files that have changed since the last backup

Time Machine uses the FSEvents framework, which tracks file system changes in real time, to efficiently identify only the files that have changed since the last backup — avoiding a full scan of the drive.

Question 42: What does the 'tmutil' command-line tool allow a technician to do that the Time Machine GUI does not?

Configure Time Machine to back up to cloud storage services
Repair corrupt Time Machine backup databases
Remotely manage Time Machine backups on other Macs on the network
Start/stop backups, list snapshots, delete specific backups, and get detailed backup status information (Correct answer)

Correct answer: Start/stop backups, list snapshots, delete specific backups, and get detailed backup status information

'tmutil' is the command-line interface for Time Machine that exposes advanced capabilities including scripted backup control, snapshot management, backup deletion, inheritance, and detailed status/log output.

Question 43: What are 'extended attributes' in macOS file system and how can they be viewed?

Additional file permissions stored in the ACL that extend beyond POSIX rwx bits
File tags and labels stored in a central macOS database separate from the file
Apple-specific file metadata stored in the file's resource fork on HFS+ volumes
Metadata attached to files outside the normal file contents, viewable with 'xattr -l filename' in Terminal (Correct answer)

Correct answer: Metadata attached to files outside the normal file contents, viewable with 'xattr -l filename' in Terminal

Extended attributes (xattrs) are arbitrary metadata attached to files and directories at the file system level, separate from the file's data. They're used for things like Quarantine flags, Finder tags, and custom metadata. Viewable with 'xattr -l filename'.

Question 44: What does it mean when a Mac displays a folder with a flashing question mark at startup?

The question mark indicates the Mac needs to be activated before first use
The Mac cannot find a bootable operating system — the startup disk is not set, is missing, or its macOS installation is damaged (Correct answer)
The flashing folder means the Mac is in Target Disk Mode and searching for a host Mac
The Mac needs a firmware update that can only be installed from Recovery

Correct answer: The Mac cannot find a bootable operating system — the startup disk is not set, is missing, or its macOS installation is damaged

A flashing folder with a question mark means the Mac's firmware cannot find a valid, bootable macOS installation. This can occur when: the startup disk is not set in System Settings, the macOS installation is corrupt, the internal drive has failed, or a new SSD was installed without macOS.

Question 45: What type of file do macOS applications use to declare their capabilities, bundle identifier, and minimum system requirements?

Localizable.strings
Info.plist (Correct answer)
MacOS.app.manifest
entitlements.plist

Correct answer: Info.plist

Info.plist (Information Property List) is a structured XML file inside every application bundle that declares the app's bundle identifier, version, required capabilities, supported file types, and minimum macOS version.

Question 46: During an Internet Recovery startup, what URL does the Mac contact to download the recovery environment?

apple.com/support/recovery
updates.cdn-apple.com
swscan.apple.com (Correct answer)
mesu.apple.com

Correct answer: swscan.apple.com

Internet Recovery contacts Apple's servers at swscan.apple.com (among other Apple CDN hosts) to download a minimal recovery image.

Question 47: How does macOS determine whether to use IPv4 or IPv6 when both are available on a network interface?

macOS uses IPv6 only for local link-local communications and IPv4 for all internet traffic
macOS prefers IPv6 for external connections following RFC 6724 address selection rules, while using IPv4 as fallback — the 'Happy Eyeballs' algorithm (RFC 6555) is used for dual-stack connections (Correct answer)
The user must manually configure which protocol is preferred in Network Advanced settings
macOS always prefers IPv4 over IPv6 for compatibility with older network equipment

Correct answer: macOS prefers IPv6 for external connections following RFC 6724 address selection rules, while using IPv4 as fallback — the 'Happy Eyeballs' algorithm (RFC 6555) is used for dual-stack connections

macOS follows RFC 6724 default address selection rules, generally preferring IPv6 for external destinations when available. The Happy Eyeballs algorithm (RFC 6555) starts both IPv4 and IPv6 connections simultaneously, using whichever succeeds first — ensuring fast connections even if one protocol path is slow.

Question 48: What is the purpose of the 'Preboot' volume in an APFS container on Apple silicon Macs?

It contains boot data and system policy for each installed macOS volume (Correct answer)
It stores Time Machine snapshots
It acts as a swap partition for virtual memory
It holds kernel extensions for third-party software

Correct answer: It contains boot data and system policy for each installed macOS volume

The Preboot volume stores per-OS boot files, cryptographic measurements, and system security policy needed to start each macOS installation.

Question 49: A Mac is configured with a manual IP address but loses network access after another device joins the network. What is the most likely issue?

The subnet mask is incorrect
There is an IP address conflict (Correct answer)
IPv6 is interfering with IPv4
The default gateway has changed

Correct answer: There is an IP address conflict

When a manually configured IP is also assigned by DHCP to another device, an IP conflict causes both machines to lose reliable connectivity.

Question 50: Which Terminal command configures macOS system settings such as time zone, remote login, and sleep behavior?

defaults
scutil
systemsetup (Correct answer)
networksetup

Correct answer: systemsetup

The `systemsetup` command allows administrators to configure system-level settings from Terminal, useful for scripting Mac deployments.

Question 51: If a Mac is simultaneously connected to an active Ethernet network and an active Wi-Fi network, how does macOS, by default, determine which interface to use for internet traffic?

It uses the connection at the top of the network service order. (Correct answer)
It defaults to Wi-Fi to preserve the Ethernet port for local traffic.
It always prioritizes the connection with the lowest latency.
It aggregates the bandwidth of both connections.

Correct answer: It uses the connection at the top of the network service order.

macOS prioritizes network connections based on the Service Order list in Network settings. By default, higher-bandwidth connections like Ethernet are placed above Wi-Fi. The system will use the highest-ranked active service in the list for network traffic.

Question 52: In macOS, where would an administrator configure which apps are allowed to use the Mac's microphone?

Security & Privacy > Privacy > Microphone (Correct answer)
Accessibility > Audio
Users & Groups > Login Items
Sound > Input

Correct answer: Security & Privacy > Privacy > Microphone

App microphone permissions are managed in Security & Privacy > Privacy > Microphone.

Question 53: What are 'login items' in macOS and where are the different types stored?

Login items and Launch Daemons are identical — both start at user login in the same sequence
Login items are exclusively managed via System Settings > Users & Groups and cannot be modified from the command line
Login items only include apps added by the user; system services use a separate startup mechanism unavailable to users
Login items launch apps/processes when a user logs in; types include user login items (System Settings > General > Login Items), LaunchAgents (~/Library/LaunchAgents and /Library/LaunchAgents), and Legacy Login Items (SMLoginItemSetEnabled) (Correct answer)

Correct answer: Login items launch apps/processes when a user logs in; types include user login items (System Settings > General > Login Items), LaunchAgents (~/Library/LaunchAgents and /Library/LaunchAgents), and Legacy Login Items (SMLoginItemSetEnabled)

Login items encompass multiple mechanisms: User-facing login items in System Settings > General > Login Items, LaunchAgents in ~/Library/LaunchAgents/ (per-user) and /Library/LaunchAgents/ (all users), plus background items registered via SMLoginItemSetEnabled by app installers.

Question 54: What is the function of the 'networksetup -setdnsservers' command in macOS Terminal?

Tests DNS resolution speed for a list of servers
Assigns custom DNS server addresses to a specified network service (Correct answer)
Exports DNS settings to a configuration file
Flushes the DNS cache for a specific interface

Correct answer: Assigns custom DNS server addresses to a specified network service

The `networksetup -setdnsservers <NetworkService> <dns1> <dns2>` command sets the DNS servers for the specified network interface from the command line.

Question 55: An IT admin wants to prevent users from adding personal Apple Accounts to company-owned iPhones. Which MDM restriction accomplishes this?

Disable App Store purchases
Restrict 'Allow Adding Personal Apple Accounts' (Correct answer)
Force Activation Lock
Disable iCloud Keychain

Correct answer: Restrict 'Allow Adding Personal Apple Accounts'

The MDM restriction to disallow adding personal Apple Accounts prevents users from signing into iCloud or the App Store with a non-Managed Apple Account.

Question 56: A Mac consistently shows a spinning globe instead of the Apple logo at startup. What does this indicate?

A firmware password is preventing access to the local drive
The Mac is attempting to boot from a NetBoot or network startup source because no valid local startup disk was found (Correct answer)
The Mac is running an iCloud sync before displaying the login window
FileVault decryption is in progress on the startup volume

Correct answer: The Mac is attempting to boot from a NetBoot or network startup source because no valid local startup disk was found

A spinning globe at startup means the Mac did not find a valid local startup disk and is searching for a bootable network source via NetBoot.

Question 57: What does the 'noatime' mount option do when applied to an APFS or HFS+ volume on macOS?

Stops Time Machine from backing up the volume
Disables APFS snapshots
Prevents new files from being created
Prevents access-time timestamps from being updated when files are read (Correct answer)

Correct answer: Prevents access-time timestamps from being updated when files are read

The `noatime` option stops macOS from writing an updated access-time to disk every time a file is read, reducing unnecessary write operations.

Question 58: What is the purpose of NVRAM/PRAM on Intel Macs and how do you reset it?

NVRAM controls the Secure Enclave settings; resetting it clears all Touch ID fingerprints
NVRAM stores the Mac's full system settings and resetting it removes all user preferences
NVRAM is the firmware memory where macOS is stored; resetting it reinstalls macOS
NVRAM stores small amounts of data the Mac needs quickly at startup (time zone, startup disk, display resolution, speaker volume); reset by holding Cmd+Option+P+R at startup (Correct answer)

Correct answer: NVRAM stores small amounts of data the Mac needs quickly at startup (time zone, startup disk, display resolution, speaker volume); reset by holding Cmd+Option+P+R at startup

NVRAM (Non-Volatile RAM) on Intel Macs stores settings needed quickly at startup including the selected startup disk, screen resolution, speaker volume, and kernel panic information. Hold Cmd+Option+P+R at startup for at least 20 seconds (or until the startup sound plays twice on older Macs) to reset it.

Question 59: Which macOS tool lets you view all running processes and their CPU/memory usage in a graphical interface?

Console
Activity Monitor (Correct answer)
System Information
Disk Utility

Correct answer: Activity Monitor

Activity Monitor displays all running processes, their CPU, memory, energy, disk, and network usage in a graphical window, making it the primary tool for monitoring and managing processes on macOS.

Question 60: A customer's Magic Mouse is not tracking correctly on their desk surface. What is the most likely cause?

Incompatible Bluetooth version on the Mac
Low battery causing reduced sensor output
Dirty or reflective surface interfering with the optical sensor (Correct answer)
The mouse needs a firmware update

Correct answer: Dirty or reflective surface interfering with the optical sensor

Optical mice can track poorly on highly reflective, transparent, or dirty surfaces that confuse the sensor.

Question 61: To ensure a critical software update process is not interrupted, an administrator needs to prevent a Mac from sleeping for the duration of a single command. Which of the following is the BEST way to run `softwareupdate -iaR` while temporarily preventing system sleep?

pmset -a sleep 0; softwareupdate -iaR
nohup softwareupdate -iaR
caffeinate softwareupdate -iaR (Correct answer)
sleep 0; softwareupdate -iaR

Correct answer: caffeinate softwareupdate -iaR

The `caffeinate` command is designed to prevent sleep. When a command is passed as an argument to `caffeinate`, it creates a sleep assertion that remains active only for the life of that command's process. This is the most targeted and safest method, as sleep behavior returns to normal as soon as the command completes. Using `pmset` would change the system's settings persistently.

Question 62: A technician is using Disk Utility to troubleshoot a storage issue. They need to check for and repair errors in the file system structure of a volume. Which Disk Utility feature should they use?

Restore
Partition
Erase
First Aid (Correct answer)

Correct answer: First Aid

First Aid is the feature in Disk Utility designed to check a disk for errors and make repairs if necessary. It verifies and repairs the file system structure and permissions. Erase is for formatting a volume, Partition is for creating or modifying partitions, and Restore is for copying a volume from a source to a destination.

Question 63: A technician sees 'kernel_task' consuming a large percentage of CPU in Activity Monitor. What does elevated kernel_task CPU usage typically indicate?

A kernel extension has crashed and is being restarted
The kernel is running software updates in the background
The Secure Enclave is performing intensive cryptographic operations
macOS is throttling CPU performance to manage thermal conditions (Correct answer)

Correct answer: macOS is throttling CPU performance to manage thermal conditions

Elevated kernel_task CPU usage is typically macOS intentionally limiting CPU performance through thermal throttling to prevent overheating.

Question 64: A Mac with Apple silicon displays a loading bar during startup that stops at about 50% and then the system shuts down. What is the most likely cause?

The display cable is loose
The user's login password is incorrect
A firmware update was interrupted mid-installation (Correct answer)
Bluetooth is causing a kernel panic

Correct answer: A firmware update was interrupted mid-installation

An interrupted firmware update can leave Apple silicon Macs in a partial state, causing startup to stall at a progress bar before the system powers off.

Question 65: A user wants to exclude a large folder of virtual machine images from their Time Machine backups to save space. They add the folder to the exclusion list in System Settings. What effect does this have on the existing backups of that folder?

The folder remains in all existing backups but will be omitted from all future backups. (Correct answer)
Time Machine prompts the user to delete the folder from previous backups during the next backup cycle.
The folder is archived in existing backups to a compressed format to save space retroactively.
The folder is immediately deleted from all previous backup snapshots.

Correct answer: The folder remains in all existing backups but will be omitted from all future backups.

Adding a folder to the Time Machine exclusion list only affects future backups. All versions of the folder that have already been backed up will remain on the backup drive until they are eventually deleted as part of Time Machine's normal process of removing the oldest backups when space is needed.

Question 66: In the Accessibility preference pane, which feature makes the pointer larger so it is easier to see on high-resolution displays?

Mouse Keys
Display > Reduce transparency
Display > Cursor Size (Correct answer)
Zoom > Use scroll gesture

Correct answer: Display > Cursor Size

The Cursor Size slider in Accessibility > Display increases the size of the mouse pointer.

Question 67: When using Apple Configurator 2 to prepare a fleet of iPhones, which preparatory step makes the most additional MDM management capabilities available?

Creating a backup of the device
Enabling supervision on the device (Correct answer)
Installing the latest iOS update
Generating a device enrollment profile

Correct answer: Enabling supervision on the device

Supervising a device via Apple Configurator 2 enables the full set of MDM restrictions and commands, including capabilities that are not available on unsupervised devices.

Question 68: You’re troubleshooting Anthony’s managed Mac, and the next step is to start in safe mode. You’re asked to authenticate. What should you use to authenticate?

The organization-linked Activation Lock bypass code
The firmware password
The user-linked Activation Lock bypass code
The recoveryOS password set from MDM (Correct answer)

Correct answer: The recoveryOS password set from MDM

Explanation: When you start Anthony’s managed Mac in safe mode, you authenticate using the recoveryOS password set by MDM. Continue to study resources related to the following learning objective: Recognize and use the appropriate boot modes for a Mac with Apple silicon.

Question 69: After replacing an internal SSD on a 2022 MacBook Pro with Apple Silicon, what must be done before macOS can be installed?

Boot to Internet Recovery and run Disk Utility first
Format the new SSD in ExFAT before inserting
Use Apple Configurator 2 on another Mac to revive or restore the firmware first (Correct answer)
The Mac will automatically detect the blank SSD and start Setup Assistant

Correct answer: Use Apple Configurator 2 on another Mac to revive or restore the firmware first

On Apple Silicon Macs, a blank or replaced SSD has no firmware; Apple Configurator 2 must be used to load the firmware via DFU before macOS can be installed.

Question 70: How do you view log messages in Console?

Control-click the Process window, then select Group by Activity.
In the Console sidebar select Log Reports, then open a report.
In Console click “Start streaming,” then click Activities in the toolbar. (Correct answer)
In the Console search field, add activity to the search string.

Correct answer: In Console click “Start streaming,” then click Activities in the toolbar.

Explanation: Use this method to view log messages in Console. Continue to study resources related to the following learning objective: Locate error, hang, and crash messages in Console to help identify issues on a Mac.

Question 71: What is Apple Remote Desktop (ARD) and how does it differ from the built-in Screen Sharing?

ARD is Apple's paid professional Mac management tool that adds multi-Mac management, task scripting, software distribution, inventory reporting, and remote task execution to basic Screen Sharing (Correct answer)
ARD is an older, deprecated protocol that has been replaced by Screen Sharing in modern macOS
ARD uses a completely different protocol than Screen Sharing and the two cannot interoperate
ARD requires macOS Server and cannot be used without a server infrastructure on the network

Correct answer: ARD is Apple's paid professional Mac management tool that adds multi-Mac management, task scripting, software distribution, inventory reporting, and remote task execution to basic Screen Sharing

Apple Remote Desktop extends Screen Sharing with professional IT management features: simultaneous control/view of multiple Macs, Unix command execution across multiple Macs, software/file distribution, detailed hardware/software inventory reports, and integration with directory services.

Question 72: A user cannot send email but can receive it. The outgoing mail server shows a connection error. Which port should you verify is not blocked by their ISP or firewall?

Port 443 (HTTPS)
Port 110 (POP3)
Port 993 (IMAP over SSL)
Port 25 or 587 (SMTP) (Correct answer)

Correct answer: Port 25 or 587 (SMTP)

SMTP uses ports 25 and 587 for sending mail; many ISPs block port 25 to prevent spam, so port 587 with authentication is the standard alternative.

Question 73: Which protocol does AirDrop use to transfer files between Apple devices?

iCloud relay for all transfers
Bluetooth only
A combination of Bluetooth for discovery and peer-to-peer Wi-Fi for transfer (Correct answer)
Wi-Fi Direct only

Correct answer: A combination of Bluetooth for discovery and peer-to-peer Wi-Fi for transfer

AirDrop uses Bluetooth to discover nearby devices and negotiate a connection, then switches to a direct peer-to-peer Wi-Fi link for the actual file transfer.

Question 74: A technician creates a new APFS volume inside an existing APFS container using Disk Utility. Which statement about the new volume's space allocation is correct?

The container's free space is equally divided among all volumes automatically
The technician must specify a fixed partition size at creation time
The new volume is assigned exactly half the remaining free space
The new volume draws from the container's shared free space pool with optional quotas (Correct answer)

Correct answer: The new volume draws from the container's shared free space pool with optional quotas

APFS volumes share a common pool of free space within the container, and optional size quotas or reservations can be set but are not required.

Question 75: A remote worker needs to connect to their corporate network via VPN. The IT department has provided them with a server address, a username, a password, and a 'shared secret'. Which built-in VPN type in macOS Network settings should they configure?

IKEv2
L2TP over IPSec
Cisco IPSec
OpenVPN (Correct answer)

Correct answer: OpenVPN

The L2TP over IPSec configuration in macOS natively includes fields for a server address, account name (username), password, and a 'Shared Secret' (also known as a pre-shared key). This matches the credentials provided by the IT department.

Question 76: A user reports that a specific application becomes unresponsive, showing the spinning beach ball cursor whenever they try to use it. The rest of the system is working normally. Which of the following is the MOST appropriate first step to terminate ONLY the problematic application without affecting other running apps?

Press and hold the power button until the Mac shuts down.
Open Activity Monitor, select 'All Processes', and quit the 'kernel_task' process.
Use the `killall` command in Terminal without any arguments.
Press Option-Command-Escape to open the Force Quit Applications window. (Correct answer)

Correct answer: Press Option-Command-Escape to open the Force Quit Applications window.

Pressing Option-Command-Escape opens the Force Quit Applications window, which allows a user to select and terminate a single, unresponsive application. This is the standard, user-friendly method for handling a single misbehaving app. Holding the power button forces a hard shutdown of the entire system. The `killall` command without a specific process name is not a valid or safe operation, and quitting 'kernel_task' can cause system instability as it's a core system process.

Question 77: A user's Mac goes to sleep too quickly while running a presentation. Which Energy Saver (or Battery) setting should be adjusted?

Enable Power Nap
Wake for network access
Prevent computer from sleeping automatically when the display is off
Turn display off after (Correct answer)

Correct answer: Turn display off after

The 'Turn display off after' slider controls how long the display stays on before sleeping; setting it to 'Never' prevents sleep during a presentation.

Question 78: A user accidentally deleted files from their Mac and emptied the Trash. Time Machine is not configured. Which macOS feature might still allow file recovery?

FileVault recovery key
APFS snapshots created by Time Machine during backups
iCloud Drive version history (Correct answer)
Spotlight index cache

Correct answer: iCloud Drive version history

iCloud Drive keeps version history and recently deleted files for up to 30 days, providing a recovery option when Time Machine is unavailable.

Question 79: Which command-line tool can be used to unload a LaunchAgent or LaunchDaemon without restarting macOS?

launchctl (Correct answer)
pmset
defaults
diskutil

Correct answer: launchctl

launchctl is the command-line interface to launchd, macOS's init and service management daemon. It can load, unload, start, stop, and query the status of LaunchAgents and LaunchDaemons.

Question 80: In macOS Ventura and later, what replaced System Preferences?

System Settings (Correct answer)
Configuration Utility
Control Panel
System Manager

Correct answer: System Settings

Apple renamed System Preferences to System Settings starting with macOS Ventura (13), featuring a redesigned interface similar to iOS.

Question 81: A user needs to restore their entire system from a Time Machine backup after replacing a failed internal drive. What is the correct first step in the recovery process?

Connect the Time Machine backup drive and hold the 'T' key during startup.
Start the Mac in Target Disk Mode and connect it to another Mac.
Start up the Mac from macOS Recovery. (Correct answer)
Open Migration Assistant from the Applications folder.

Correct answer: Start up the Mac from macOS Recovery.

To perform a full system restore from a Time Machine backup onto a new drive, the user must first boot the Mac into macOS Recovery. From the macOS Utilities window, they can then select the 'Restore From Time Machine Backup' option.

Question 82: What does macOS's System Integrity Protection (SIP) protect and how does it affect technician workflows?

SIP protects critical system directories (/System, /usr, /bin, /sbin) and processes from modification even by root; disabling it for certain tasks requires booting to Recovery and using 'csrutil disable' (Correct answer)
SIP requires admin authentication for any change to system files but allows root access without restriction
SIP only protects against external attacks and does not restrict local admin user operations
SIP is a network security feature that prevents unauthorized connections to protected system services

Correct answer: SIP protects critical system directories (/System, /usr, /bin, /sbin) and processes from modification even by root; disabling it for certain tasks requires booting to Recovery and using 'csrutil disable'

SIP (System Integrity Protection) protects system directories and processes from modification, even by root. Legitimate system management tasks that require SIP to be disabled (like installing certain legacy software) require booting to Recovery and running 'csrutil disable' — though this is strongly discouraged.

Question 83: What are 'Managed Preferences' in macOS and how do they differ from regular preferences?

Managed Preferences are preferences synchronized via iCloud that apply across all a user's Macs
Managed Preferences are enforced settings delivered via MDM or MCX that override user preferences and cannot be changed by users — shown with a lock icon in System Settings (Correct answer)
Managed Preferences are preferences shared between multiple user accounts on the same Mac
Managed Preferences are the default preferences set by Apple that apply before any user customization

Correct answer: Managed Preferences are enforced settings delivered via MDM or MCX that override user preferences and cannot be changed by users — shown with a lock icon in System Settings

Managed Preferences (set via MDM configuration profiles or legacy MCX from directory services) enforce system and application settings that users cannot change. They appear with a lock icon in System Settings, indicating the setting is under organizational control.

Question 84: What is the recommended enterprise practice for storing FileVault recovery keys on organization-managed Macs?

Print the key and store it in a locked filing cabinet at the office
Escrow the institutional recovery key to the organization's MDM solution for centralized, secure retrieval (Correct answer)
Email the recovery key to the IT department shared inbox immediately after enabling FileVault
Store the key in the user's personal iCloud account for easy self-service recovery

Correct answer: Escrow the institutional recovery key to the organization's MDM solution for centralized, secure retrieval

Best practice in enterprise environments is to escrow FileVault institutional recovery keys to an MDM platform (such as Jamf, Kandji, or Microsoft Intune for Mac). This allows IT administrators to retrieve keys securely when users forget passwords, with full audit logging and without relying on insecure channels like email or paper.

Question 85: A user's Mac gets stuck on a spinning globe during startup. What does this indicate?

The Mac is attempting to boot from a network server via NetBoot or network startup (Correct answer)
The Bluetooth keyboard is not paired and the Mac is waiting for input
macOS is performing a background update automatically
The Mac's internal SSD has failed and needs replacement

Correct answer: The Mac is attempting to boot from a network server via NetBoot or network startup

A spinning globe at startup means the Mac is attempting to boot from a network startup source such as NetBoot, NetInstall, or NetRestore.

Question 86: Which VPN protocols can you manually configure in Mac System Settings?

L2TP over IPSec, Cisco IPSec, and IKEv2 (Correct answer)
L2TP over IPSec, SSTP, and IKEv2
L2TP over IPSec, Cisco IPSec, and OpenVPN
WireGuard, Cisco IPSec, and IKEv2

Correct answer: L2TP over IPSec, Cisco IPSec, and IKEv2

Explanation: For information about the VPN settings you need to enter, contact the your organization’s network administrator or your VPN service provider. Continue to study resources related to the following learning objective: Configure, manage, and use VPN settings on iPhone, iPad, and Mac.

Question 87: What happens to Managed Apps when a device is unenrolled from MDM?

Apps are moved to a quarantine folder
Apps convert to personal apps owned by the user
Apps are removed automatically if the MDM server is configured to do so (Correct answer)
Apps remain installed but lose their configuration

Correct answer: Apps are removed automatically if the MDM server is configured to do so

When a device unenrolls, the MDM server can be configured to remove managed apps and their associated data automatically.

Question 88: Which macOS command-line tool can be used to flush the DNS cache?

networksetup -flushdns
nslookup -flush
ipconfig /flushdns
dscacheutil -flushcache && killall -HUP mDNSResponder (Correct answer)

Correct answer: dscacheutil -flushcache && killall -HUP mDNSResponder

On macOS, flushing the DNS cache requires clearing the local cache with dscacheutil and signaling mDNSResponder to reset.

Question 89: Which macOS Recovery environment installs the same macOS version that came with the Mac when purchased?

Booting from a USB installer
Shift+Option+Command+R at startup (Intel) (Correct answer)
Option+Command+R at startup (Intel)
Command+R at startup

Correct answer: Shift+Option+Command+R at startup (Intel)

On Intel Macs, Shift+Option+Command+R at startup triggers recovery that installs the original macOS the Mac shipped with, or the earliest compatible version.

Question 90: A user returned their unmanaged iPad. You turn it on for a new user, and you discover that Activation Lock is turned on. What do you need to turn off Activation Lock?

Serial number of the iPad
The previous user’s Apple ID and password (Correct answer)
The new user’s Apple ID and password
The previous user’s Lost Mode PIN for the iPad

Correct answer: The previous user’s Apple ID and password

Explanation: You can’t turn off Activation Lock without the previous user’s Apple ID and password. If possible, ask the previous user to enter their credentials to turn off Activation Lock. Continue to study resources related to the following learning objective: Enter a bypass code on a managed device that has Activation Lock turned on.

Question 91: Which of the following is a primary function of the Content Caching service in macOS?

To block incoming connections from unauthorized applications.
To reduce internet data usage by storing local copies of Apple software updates. (Correct answer)
To serve as a Time Machine backup destination for network clients.
To create a shared network volume for collaborative document editing.

Correct answer: To reduce internet data usage by storing local copies of Apple software updates.

The core purpose of the Content Caching service is to download and store local copies of content that devices on the network request from Apple, such as macOS updates, App Store apps, and iCloud data. This significantly reduces internet bandwidth consumption and accelerates download times for other devices on the same network.

Question 92: A Mac supports up to how many APFS volumes within a single APFS container before performance may be impacted?

Exactly 4 volumes
Up to 16 volumes
Up to 8 volumes
There is no defined limit; performance depends on available storage (Correct answer)

Correct answer: There is no defined limit; performance depends on available storage

APFS imposes no hard limit on the number of volumes per container, but all volumes share the same pool of free space and I/O resources.

Question 93: Which of the following command-line utilities is the primary tool for scripting and managing network service configurations in macOS, such as setting a static IP address for an Ethernet adapter or changing the network service order?

`ipconfig`
`networksetup` (Correct answer)
`ifconfig`
`net-tools`

Correct answer: `networksetup`

The `networksetup` command is the designated macOS tool for configuring network settings from the command line. It can be used to perform a wide range of tasks, including setting IP addresses, configuring DNS servers, managing Wi-Fi networks, and ordering network services. `ifconfig` can display information but is not the primary configuration tool, and `ipconfig` is a Windows command.

Question 94: What does 'traceroute' show in macOS network diagnostics?

Traceroute shows the physical cable route that network traffic takes from the Mac to the destination server
Traceroute only works on local networks and cannot trace routes across the internet
Traceroute tests all network interfaces simultaneously and shows which provides the fastest path to a destination
Traceroute shows each network hop (router) between the Mac and destination, with latency at each hop — revealing where packets are delayed or dropped along the path (Correct answer)

Correct answer: Traceroute shows each network hop (router) between the Mac and destination, with latency at each hop — revealing where packets are delayed or dropped along the path

'traceroute hostname' (or 'traceroute -n IP_address' to skip DNS lookups) sends packets with incrementing TTL values, revealing each router hop with its IP/hostname and round-trip latency — showing exactly where high latency or packet loss occurs along the network path.

Question 95: A technician uses `diskutil secureErase freespace 0 /dev/disk1s1` before reinstalling macOS. What does this command do?

Reformats the partition table to GPT
Erases the entire disk including all partitions
Writes zeros to only the free (unused) space on the specified APFS volume (Correct answer)
Performs a DoD 7-pass erase of all data on disk1s1

Correct answer: Writes zeros to only the free (unused) space on the specified APFS volume

The `secureErase freespace 0` option writes a single pass of zeros only to the free space on the volume, not to areas with existing data.

Question 96: Which command can be used to compress a folder named `reports` into a gzip-compressed tar archive called `reports.tar.gz`?

zip -r reports.tar.gz reports
compress -o reports.tar.gz reports
gzip -r reports reports.tar.gz
tar -czf reports.tar.gz reports (Correct answer)

Correct answer: tar -czf reports.tar.gz reports

`tar -czf` creates (`c`) a gzip-compressed (`z`) archive file (`f`) from the specified directory.

Question 97: How can you configure a Mac to automatically restart after a power failure?

Both Energy Saver GUI setting and `pmset -a autorestart 1` work (Correct answer)
Via a startup script in /etc/rc.local
Only via Energy Saver in System Settings
Only via the `pmset` command in Terminal

Correct answer: Both Energy Saver GUI setting and `pmset -a autorestart 1` work

Auto-restart after power failure can be enabled in Energy Saver/Battery settings GUI or via `sudo pmset -a autorestart 1` in Terminal.

Question 98: What happens to APFS snapshots when a Time Machine backup is successfully completed on an APFS volume?

The local snapshot is deleted after the backup completes (Correct answer)
Snapshots are converted to full backups
Snapshots remain permanently until disk space runs low
Snapshots are encrypted and stored in the backup

Correct answer: The local snapshot is deleted after the backup completes

macOS creates a local APFS snapshot before backing up, and once the Time Machine backup to the external destination completes successfully, the local snapshot is removed.

Question 99: What is Zero Touch Deployment for Macs and what technologies enable it?

Zero Touch Deployment uses Apple Remote Desktop to push configuration scripts to Macs as soon as they appear on the network
Zero Touch Deployment uses Apple Business Manager + MDM to automatically enroll and configure new Macs out of the box, requiring no IT hands-on setup before delivery to the user (Correct answer)
Zero Touch Deployment requires the Mac to have macOS Server installed to bootstrap the configuration process
Zero Touch Deployment is a third-party solution; Apple does not provide native support for hands-free Mac provisioning

Correct answer: Zero Touch Deployment uses Apple Business Manager + MDM to automatically enroll and configure new Macs out of the box, requiring no IT hands-on setup before delivery to the user

Zero Touch Deployment combines Apple Business Manager (Automated Device Enrollment) with an MDM solution (Jamf, Intune, Mosyle, etc.) to automatically configure Macs upon first boot — apps install, settings configure, and the device is fully managed without IT touching the hardware.

Question 100: How does APFS handle file cloning and why is it faster than a traditional file copy?

APFS clones create a symbolic link that is resolved to a full copy the first time the clone is accessed
APFS clones create an instant copy-on-write duplicate that shares the same underlying data blocks until either file is modified, requiring no actual data copying at creation time (Correct answer)
APFS clones use hardware-level compression to replicate files faster than standard I/O operations
APFS clones leverage GPU acceleration for parallel file duplication across storage blocks

Correct answer: APFS clones create an instant copy-on-write duplicate that shares the same underlying data blocks until either file is modified, requiring no actual data copying at creation time

APFS file cloning uses copy-on-write (COW) semantics: a clone is created instantly by sharing the same physical data blocks as the original. No data is actually duplicated until one of the files is modified, at which point only the changed blocks are written anew.

Apple Certified Support Professional (ACSP)

The ACSP certification validates the ability to support macOS users, troubleshoot issues, configure key services, and manage Apple devices in professional environments.

100

Questions

120 min

Time Limit

75%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds