Apple Apple-Device-Support Apple Device Support Exam (SUP-2026) Exam Practice Test

 A sysdiagnose is a comprehensive report that contains information about the system state, logs, and diagnostic files from your iPad. You can use a sysdiagnose to troubleshoot issues with a custom app or any other app on your iPad. To gather a sysdiagnose, you need to press and quickly release the volume up button, then press and quickly release the volume down button, then press and hold the top button until the screen flashes.  Then you can find the sysdiagnose file in the Settings app under Privacy & Security > Analytics & Improvements > Analytics Data 1 .  References :  Apple Device Support Exam Prep Guide , page 10.  How to collect a sysdiagnose for iOS , Apple Developer.

These are the correct answers because these are the two authentication methods that users can use to lock a note in the Notes app on their iPad devices. Users can choose to use their device passcode or a custom password for each Notes account. If they use their device passcode, they can also use Face ID or Touch ID to access their locked notes. If they use a custom password, they have to enter it on all devices where they are signed in with the same Apple ID. Users can also switch between the two methods in the Settings app. To lock or unlock a note, users have to tap the three-dotted More button and choose the Lock option, or tap the Lock icon in the top toolbar.  References :  Lock your notes on iPhone - Apple Support (CA) ,  How to lock individual Apple Notes using your iPhone’s passcode - Inverse

If you forgot your passcode and your iPhone is disabled, you need to erase your iPhone and set it up again. The only way to do this is to put your iPhone in recovery mode and connect it to a computer with iTunes or Finder. This will erase all your data and settings, including the passcode, and install the latest version of iOS or iPadOS on your iPhone. You can then restore your data and settings from a backup, if you have one, or set up your iPhone as a new device. To put your iPhone in recovery mode, you need to follow these steps:

Make sure that your iPhone is not connected to your computer, then turn it off completely.

Press and hold the correct button for your iPhone model while connecting it to your computer. For iPhone 8 and later, use the side button. For iPhone 7 and 7 Plus, use the volume down button. For iPhone 6s and earlier, use the home button.

Keep holding the button until you see the recovery mode screen on your iPhone, then release the button. The recovery mode screen shows a cable and a computer icon.

On your computer, open iTunes or Finder and locate your iPhone. You should see a message that says there is a problem with your iPhone that requires it to be updated or restored.

Choose Restore to erase your iPhone and install the latest software. This may take some time, so do not disconnect your iPhone until the process is complete.

After your iPhone is restored, you can set it up again using the onscreen instructions. You can choose to restore from a backup or set up as a new device.

Sidecar is a feature that lets you use your iPad as a display that extends or mirrors your Mac desktop. You can use Sidecar to work with different apps on the different screens, use the same app on both screens, or mirror the screens so that they show the same content. You can also use your Apple Pencil to draw, edit, or mark up documents on your iPad while seeing the updates live on your Mac. Sidecar requires macOS 10.15 or later and iPadOS 13 or later on supported models. You can use Sidecar wirelessly or with a USB cable. To use Sidecar, you need to select your iPad from the Display menu in Control Center or the menu bar on your Mac, or from the AirPlay menu on macOS Catalina. You can also use the sidebar and the Touch Bar on your iPad to access common Mac controls and app-specific commands. The other options are not the correct answer, as they have different functions or are not available on macOS and iPadOS.

Universal Control is a feature that lets you use a single keyboard, mouse, or trackpad to control your Mac and iPad, with the iPad showing its own Home Screen and apps rather than the desktop and apps of your Mac. You can also drag and drop content between your devices. Universal Control requires macOS Monterey or later and iPadOS 15 or later on supported models.

Screen Sharing is a feature that lets you remotely view or control another Mac or share your Mac screen with others over the internet. You can use Screen Sharing to help someone with a problem, collaborate on a project, or access your files and apps. Screen Sharing requires macOS 10.14 or later on both Macs, and an Apple ID or a local network connection.

Stage Manager is not a feature on macOS or iPadOS. It is a feature on watchOS 8 or later that lets you control the camera and microphone on your iPhone from your Apple Watch. You can use Stage Manager to take photos, record videos, zoom in and out, adjust the exposure, mute the sound, and switch between the front and back cameras on your iPhone.  References :

Apple Device Support Exam Prep Guide , page 6

Use an iPad as a second display for a Mac

Use iPad as a second display for your Mac

Sidecar: Turn an iPad Into a Secondary Mac Display

Use Universal Control on your Mac and iPad

Share the screen of another Mac

[Use Stage Manager on your Apple Watch]

An IP address that starts with 169.254 is called a link-local address. It is assigned by the operating system when the DHCP client cannot contact a DHCP server to obtain a valid IP address. This may indicate a problem with the DHCP server, the network connection, or the DHCP client configuration. A link-local address is not routable and cannot communicate with devices outside the local network segment.  References : =  Troubleshoot problems on the DHCP server ,  Windows 10 not getting IP address from DHCP ,  Fix duplicate IP address conflicts on a DHCP network ,  DHCP client may fail to obtain a DHCP-assigned IP address ,  Setting IP Address Using DHCP Server

To view the current activity of Apple Configurator for Mac, you can access the Activity window from the menu bar. The Activity window shows you the background tasks that Apple Configurator is performing, such as downloading software updates, preparing devices, or installing profiles.  You can also pause, resume, or cancel any activity from this window 1 .  The other options, double-clicking the device and selecting Activity, or choosing View Activity from the Apple Configurator menu, are not valid ways to access the Activity window.  References :  1  View log messages and activity in Apple Configurator - Apple Support

 To manually configure VPN in Network settings on a Mac, you need to click the Action pop-up menu on the right, choose Add VPN Configuration, then choose the type of VPN connection you want to set up. This option allows you to enter the VPN server address, account name, and any authentication settings, such as a password or a certificate. The other options are not related to adding a VPN configuration. Add Service is used to add a new network service, such as Wi-Fi or Ethernet. Manage Virtual Interfaces is used to create or edit VLANs or link aggregations. Set Service Order is used to change the order of network services in the list.  References :  Set up a VPN connection on Mac - Apple Support

Continuity Camera is a macOS feature that allows you to use your iPhone as a webcam on your Mac. With Continuity Camera, you can take advantage of the powerful iPhone camera and additional video effects, such as Center Stage, Portrait mode, Studio Light, and Desk View.  You can connect your iPhone to your Mac wirelessly or with a USB cable, and choose your iPhone as the camera or microphone in apps that support it, such as FaceTime or Photo Booth 1 . The other options, Focus, Stage Manager, and Quick Look, are not macOS features that allow you to use your iPhone as a webcam.  Focus is a feature that helps you reduce distractions and stay focused on what matters to you 2 .  Stage Manager is a third-party app that lets you control your live stream from your iPhone 3 .  Quick Look is a feature that lets you preview files without opening them 4 .  References :  1  Use your iPhone as a webcam on Mac - Apple Support  2  Use Focus on your Mac - Apple Support  3  Stage Manager - App Store  4  Use Quick Look on Mac - Apple Support

To delete a user on a Mac, you need to follow these steps 1 2 :

Navigate to System Settings —► Users & Groups. This is where you can manage the users and groups on your Mac. You may need to scroll down to see all the options.

Click the lock icon at the bottom left of the window and enter your administrator password to make changes.

Click the (i) button next to the user you would like to delete on Mac. This will show you more information about the user, such as their name, picture, password, and permissions.

Click Delete User or Delete Group. This will prompt you to confirm your action and choose what to do with the user’s home folder.

Select Delete Account. This will remove the user and their home folder from your Mac, freeing up storage space. Alternatively, you can choose to save the home folder as a disk image or leave it as it is, in case you want to restore the user later.

Click Delete User or Delete Group again to finalize the deletion.

 Before you can access the macOS Recovery options on a Mac with Apple silicon that has FileVault or Activation Lock turned on, you must first authenticate as an administrator. This is because FileVault and Activation Lock are security features that encrypt your data and prevent unauthorized access to your Mac. To authenticate as an administrator, you need to select one of the displayed administrator accounts on the startup options screen, then enter the account’s password. This will unlock the system and allow you to use the macOS Recovery apps and utilities. The other options are not correct. You do not need to access the Startup Security Utility or enter the FileVault recovery key or the Apple ID and two-factor authentication to reach the macOS Recovery options.  References :  Use macOS Recovery on a Mac with Apple silicon - Apple Support ,  How to Enter macOS Recovery on an Apple Silicon Mac - MUO

Network settings is the macOS resource that displays the status of network interfaces in a dynamic list. You can access Network settings from System Preferences > Network, or by clicking the network icon in the menu bar and choosing Open Network Preferences. Network settings shows you the available network interfaces, such as Wi-Fi, Ethernet, Bluetooth, etc., and their connection status, IP address, DNS server, and other information. You can also use Network settings to configure, enable, disable, or troubleshoot your network connections.  References : =  Apple Device Support Exam Prep Guide , page 11;  Apple - Support - Manuals , macOS User Guide, Network preferences.

Restoring a Mac with Apple silicon using Apple Configurator is a process that updates the firmware, updates recoveryOS to the latest version, and erases and installs the latest version of macOS on the internal storage. When this process is complete, any data on any internal volumes is unrecoverable.  You must restore the firmware and erase the internal flash storage if reviving the firmware is unsuccessful or if you can’t start the Mac from the startup volume or the recoveryOS 1 .  References :  Revive or restore a Mac with Apple silicon using Apple Configurator , Apple Support.

According to the Apple Device Support Reference Materials, you need your passcode to enable Face ID when:

You have just turned on or restarted your device by force restart or automatically after an OTA software update 1 .

Your device has failed to match a face for 5 times 1 .

You haven’t unlocked your device for more than 48 hours 1 .

The other two options, C and D, are not correct because they are based on incorrect or incomplete information.  The correct condition for option C is that the passcode hasn’t been used to unlock the device in the last six and a half days and Face ID hasn’t unlocked the device in the last 4 hours 1 .  The correct condition for option D is that your device has received a remote lock command 1 .  References :  1 :  Use Face ID on your iPhone or iPad Pro - Apple Support , Section " Require a passcode " .

Reference Mode is a display mode for professional content creation workflows, like color grading, editing, and content review, where accurate colors and consistent image quality are critical. Reference Mode enables the 12.9-inch iPad Pro with Liquid Retina XDR display to deliver reference color for popular color standards and video formats, such as BT.709, sRGB, HDR10, Dolby Vision, and more. It also disables all dynamic display adjustments for ambient surround, such as True Tone, Auto-Brightness, and Night Shift. Guillermo can use Reference Mode to match the color requirements of his workflow and ensure that his marketing materials and color grading are accurate and consistent. He can also use Reference Mode with Sidecar to use his iPad Pro as a secondary reference display for his Mac.  References :  Use Reference Mode on your iPad Pro ,  iPadOS 16: These are the new features exclusive to M1 iPads

To create a bootable macOS installer that includes macOS Recovery on an external storage device, you need to use the Mac OS Extended format, also known as HFS+. This is because the createinstallmedia command, which is used to create the bootable installer, requires the volume to be formatted as Mac OS Extended. APFS (Apple File System) is not supported by createinstallmedia, and neither are the encrypted versions of APFS or Mac OS Extended. Therefore, the correct answer is D. Mac OS Extended.  References :  Create a bootable installer for macOS ,  How to create a bootable USB macOS installer ,  How to format the startup drive for a Mac

According to the Apple Device Support Reference Materials, you can control who can discover your iPhone or iPad when it’s within AirDrop range by setting AirDrop to Contacts Only 1 . This means that only people in your Contacts app can see your device and send you content via AirDrop.  You can also set AirDrop to Receiving Off, which means that no one can see your device or send you content via AirDrop 1 . The other two options, B and C, are not correct because they are not related to AirDrop settings.  Requiring a verification code from the other device in Password & Security settings is a feature that helps you sign in to your Apple ID account on a new device 2 .  Turning off AirDrop in Privacy settings is not possible, as AirDrop is not listed under Privacy settings 3 .  References :  1 :  How to use AirDrop on your iPhone or iPad - Apple Support , Section " How to adjust AirDrop settings " .  2 :  Sign in with your Apple ID - Apple Support , Section " Use a verification code with two-factor authentication " .  3 : Privacy settings on iPhone - Apple Support

 Face ID is a biometric authentication feature that allows users to unlock their device with a facial scan. Face ID attempts to match the user’s face with the stored data every time the device is woken up. However, there are situations where Face ID is not permitted or fails to recognize the user. In those cases, the user must enter their passcode or password to unlock the device. One of those situations is when there are five unsuccessful attempts to match a face. After five failed scans, Face ID is disabled and the user is prompted to enter their passcode or password. This is a security measure to prevent unauthorized access to the device by someone who does not look like the user.  References :  Face ID, Touch ID, passcodes, and passwords - Apple Support ,  What Is Face ID? - How-To Geek

 Activation Lock is a feature that prevents unauthorized use of an Apple device after it has been erased. It is enabled automatically when a user turns on Find My on their device. However, for devices that are owned or managed by an organization, there are two types of Activation Lock available: device-linked and user-linked. Device-linked Activation Lock requires Apple School Manager, Apple Business Manager, or Apple Business Essentials and an MDM solution. It allows the MDM solution to control turning Activation Lock on and off through server-side interactions, without depending on the user’s Apple ID or Find My settings. The MDM solution creates and sends a bypass code to Apple servers when it needs to lock or unlock the device. User-linked Activation Lock requires the user to have a personal Apple ID (not a Managed Apple ID) and to turn on Find My on their device. This method allows the user to lock an organization-linked device to their personal Apple ID if the MDM solution has allowed Activation Lock. The MDM solution should request and store a bypass code from the device before allowing the user to turn on Activation Lock. This bypass code can be used to turn off Activation Lock remotely with MDM, or directly on the device, if the user is unable to authenticate with their Apple ID.  References :

Activation Lock on Apple devices - Apple Support

Activation Lock: How Apple Admins Can Manage It - Kandji

Disable Activation Lock on Apple devices with Intune

 You can enter your iPhone passcode wrong up to ten times before your account is disabled. After six failed attempts, your iPhone will be disabled for one minute. After seven attempts, it will be disabled for five minutes. After eight attempts, it will be disabled for 15 minutes. After nine attempts, it will be disabled for 60 minutes.  After ten attempts, it will be disabled until you connect it to a computer and restore it using iTunes or Finder 1 2 .  References : =  If you forgot your iPhone passcode - Apple Support ;  What to do when your iPhone is disabled | Tom’s Guide .

Disk Utility on Mac supports several file system formats for formatting, partitioning, and erasing disks.  According to the Apple Device Support Reference Materials 1 , these formats are:

Apple File System (APFS): The file system used by macOS 10.13 or later, which features strong encryption, space sharing, snapshots, fast directory sizing, and improved file system fundamentals. APFS is optimized for the Flash/SSD storage used in recent Mac computers, but it can also be used with older systems with traditional hard disk drives (HDD) and external, direct-attached storage. APFS supports four variants: APFS, APFS (Encrypted), APFS (Case-sensitive), and APFS (Case-sensitive, Encrypted).

Mac OS Extended: The file system used by macOS 10.12 or earlier, which is also known as HFS Plus or HFS+. Mac OS Extended supports journaling, which helps protect the integrity of the file system in case of power outages or hardware failures. Mac OS Extended also supports four variants: Mac OS Extended (Journaled), Mac OS Extended (Journaled, Encrypted), Mac OS Extended (Case-sensitive, Journaled), and Mac OS Extended (Case-sensitive, Journaled, Encrypted).

ExFAT: A file system that is compatible with both Mac and Windows computers, and can be used for transferring files between them. ExFAT supports larger file sizes than FAT32, up to 16 EB, and larger volumes, up to 128 PB. ExFAT does not support journaling, encryption, or case sensitivity.

MS-DOS (FAT): A file system that is compatible with both Mac and Windows computers, and can be used for transferring files between them. MS-DOS (FAT) supports two variants: FAT16 and FAT32. FAT16 is limited to 2 GB volumes and 4 GB files, while FAT32 can support up to 2 TB volumes and 4 GB files. MS-DOS (FAT) does not support journaling, encryption, or case sensitivity.

Therefore, the correct answer is A, C, D, and F.

Your Mac uses Bluetooth to broadcast its location information after you turn on Find My when it’s offline or in sleep mode.  This is part of the Find My network, which is an encrypted, anonymous network of hundreds of millions of Apple devices that can help you locate your device, even when it’s offline 1 . When your Mac is offline or in sleep mode, it sends out a secure Bluetooth signal that can be detected by other Apple devices nearby.  These devices relay the location of your Mac to iCloud so you can view it in the Find My app 2 .  The other options, Ultra Wideband (UWB), Emergency SOS, and Wi-Fi, are not used by your Mac to broadcast its location information in this scenario.  References :  1  About the Find My network - Apple Support  2  Locate a device in Find My on Mac - Apple Support

The Smart Connector is a magnetic port that allows you to connect compatible accessories, such as the Smart Keyboard or the Magic Keyboard, to your iPad. Sometimes, your iPad may stop responding to your keyboard or trackpad that’s connected with the Smart Connector. This could be due to various reasons, such as software issues, dirt or debris on the connectors, or interference from other cases or covers.  According to the Apple Device Support Reference Materials 1 , the following steps can help you troubleshoot the problem:

Restart your iPad. This can resolve many software glitches that may prevent your iPad from recognizing your accessory. To restart your iPad, press and hold the Top button and either volume button until the power off slider appears. Drag the slider, then wait for 30 seconds for your device to turn off. To turn your device back on, press and hold the Top button until you see the Apple logo.

Remove any other iPad case or cover. Some cases or covers may interfere with the Smart Connector or the accessory’s magnets, causing connection issues. Make sure you remove any other case or cover from your iPad before attaching your accessory. Also, make sure the Smart Connector and the accessory’s connectors are clean and free of any dirt or debris. You can use a soft, lint-free cloth to gently wipe the connectors.

Update your iPad to the latest version of iPadOS. Updating your iPad can ensure that you have the latest features and bug fixes that may improve the compatibility and performance of your accessory. To update your iPad, go to Settings > General > Software Update and follow the onscreen instructions.

Reference Mode is a display mode for professional content creation workflows, like color grading, editing, and content review, where accurate colors and consistent image quality are critical. Reference Mode enables the 12.9-inch iPad Pro with Liquid Retina XDR display to deliver reference color for popular color standards and video formats, such as BT.709, sRGB, HDR10, Dolby Vision, and more. It also disables all dynamic display adjustments for ambient surround, such as True Tone, Auto-Brightness, and Night Shift. Guillermo can use Reference Mode to match the color requirements of his workflow and ensure that his marketing materials and color grading are accurate and consistent. He can also use Reference Mode with Sidecar to use his iPad Pro as a secondary reference display for his Mac.  References :  Use Reference Mode on your iPad Pro ,  iPadOS 16: These are the new features exclusive to M1 iPads

 Revive is an action in Apple Configurator for Mac that allows you to restore the latest version of iOS or iPadOS on an iPhone or iPad device, while preserving user data (if recoverable). Revive is useful when a device is unresponsive or in recovery mode, and you want to try to fix it without erasing the user’s data. Revive does not require the device to be supervised or enrolled in MDM, and it does not affect the activation lock status of the device. Revive is different from Restore, which erases the device and installs the latest version of iOS or iPadOS. Restore also requires the device to be supervised or enrolled in MDM, and it removes the activation lock from the device. Update is another action that installs the latest version of iOS or iPadOS on the device, but it does not work when the device is unresponsive or in recovery mode. Erase all Content and Settings is a device setting that erases the device and removes the activation lock, but it does not install the latest version of iOS or iPadOS.  References : =  Apple Configurator User Guide for Mac , section “Revive an iPhone, iPad, or Apple TV”;  Apple Device Support Exam Prep Guide , page 9.

According to the  Apple Support  website, you can manually configure a VPN connection on your Mac by choosing one of the following VPN protocols: L2TP over IPSec, Cisco IPSec, or IKEv2. L2TP (Layer 2 Tunneling Protocol) is an extension of PPTP (Point-to-Point Tunneling Protocol) used by internet service providers to enable a VPN over the internet. IPSec (Internet Protocol Security) is a set of security protocols. IKEv2 (Internet Key Exchange) is a protocol that sets up a security association in IPSec.  The other options, SSTP, Wireguard, and OpenVPN, are not supported by macOS System Settings, and require third-party software to use.  References :  1  Set up a VPN connection on Mac - Apple Support

Console is a macOS diagnostic utility used to view log messages, reports, and analytics information generated by the operating system and applications. When an app quits unexpectedly, macOS can generate diagnostic or crash-related information that helps identify what happened around the failure. Apple documents that Console can display analytics information related to events such as applications quitting unexpectedly, forced application termination, and system errors. Therefore, reviewing log data for apps that unexpectedly quit is the correct use described in option D. Console does not dynamically reallocate memory to applications, terminate CPU-intensive background processes automatically, or function primarily as a cache-management utility. Those activities involve other macOS components or tools. Console’s key troubleshooting value is providing diagnostic evidence that can help correlate errors, crashes, and abnormal application behavior.

================

When a user cannot log in and has started the Mac in macOS Recovery, Apple provides a password-reset workflow through Terminal. From the Utilities menu, open Terminal, type the command `resetpassword`, and press Return. This launches the Reset Password assistant, where the user can follow the available recovery steps and create a new login password. Therefore, option B is correct; the command is properly written as `resetpassword` without a space. The `passwd` command is not the Apple-documented Recovery workflow for this scenario. Disk Utility is used primarily for storage and file-system tasks, and changing Secure Boot settings does not reset a local user password. The Recovery password assistant is specifically designed to handle forgotten or unusable Mac login passwords when normal sign-in is unavailable.

================

System Integrity Protection (SIP) is a macOS security technology that limits what even the root user can modify or control in protected parts of the operating system. Apple specifically documents that SIP helps prevent software from selecting a startup disk, which makes option C the correct choice. SIP does not block ordinary user activities such as downloading files from external storage, installing approved App Store software, or saving documents outside the user’s home folder. Its purpose is to protect critical system locations and security-sensitive operations from unauthorized modification, including actions performed by processes running with elevated privileges. This protection reduces the ability of malicious software to alter essential macOS components or redirect startup behavior. Therefore, permitting software to select a startup disk is the action restricted by SIP.

================

Supervision gives an organization additional management control over an iPhone, including control of operating-system update behavior. Apple device management supports declarative software-update configurations that can specify and enforce an operating-system version or schedule updates for managed devices. As a result, a supervised iPhone can receive an organization-enforced software update even when the user has disabled ordinary automatic updates in Settings. Signing in with a Managed Apple Account alone does not explain the forced installation. User Enrollment is designed primarily for personally owned devices and does not provide the same supervision-based control described in the scenario. The fact that the update occurred despite the user’s local automatic-update preference indicates that the software-update process was being controlled by the organization’s device management service. Therefore, option D is correct.

================

The `ping` command tests connectivity by sending ICMP echo requests, while Safari normally accesses websites using HTTP or HTTPS over TCP. A server or firewall can therefore be configured to ignore or block ICMP ping requests while still permitting normal web traffic. Apple documents this same principle with firewall stealth mode, which can prevent responses to probing requests such as ICMP ping while allowing authorized application traffic. This makes option C the intended answer. An expired SSL certificate would normally generate a certificate warning in Safari rather than simply prevent ping responses. SPF records relate to email authentication and have nothing to do with ICMP connectivity. If the Mac firewall blocked all outbound network traffic, Safari would not successfully load the website.

================

If Location Services was skipped during iPhone setup, it must be enabled before Maps can use the device’s location for navigation. Go to Settings > Privacy & Security > Location Services and turn Location Services on. Maps must then be granted appropriate location permission. For precise turn-by-turn directions, Precise Location should also remain enabled for Maps. Apple explains that Location Services uses available GPS, Wi-Fi, Bluetooth, and cellular information to determine the device’s approximate or precise position. Background location access alone cannot solve the problem if Location Services itself is disabled. An MDM administrator is not normally required to activate the user-controlled setting, and simultaneous Wi-Fi and cellular connectivity is not mandatory for location determination. Therefore, option C is correct.

================

XProtect is Apple’s built-in antivirus technology for macOS. It performs signature-based malware detection using YARA signatures, making option C correct. Apple monitors emerging malware and regularly updates XProtect signatures automatically and independently of normal macOS operating-system updates. XProtect can check applications when they are first launched, when an application changes in the file system, and when new XProtect signatures are installed. It can block known malicious software and also includes technology for remediating malware that has already executed. XProtect does not depend on third-party endpoint applications or a device management service to supply its malware signatures. Although notarization and Gatekeeper work alongside XProtect as parts of macOS malware protection, XProtect is not based solely on notarization hashes distributed through CloudKit.

================

Lockdown Mode is an optional extreme-protection feature designed for users who may face highly sophisticated targeted cyberattacks. To reduce the device’s attack surface, Apple restricts several communications and connectivity features. Incoming FaceTime calls are blocked unless the user previously called that person or contact within the permitted recent period. Therefore, option C is correct. Lockdown Mode also restricts other capabilities such as certain Messages attachments, complex web technologies, incoming Apple service invitations, Shared Albums, device connections, and configuration-profile installation. It does not simply disable Calendar events, the App Store, or normal iCloud Backup as described by the other options. The restrictions intentionally reduce functionality in exchange for stronger protection against advanced exploit chains and targeted spyware.

================

When an iPhone displays a Storage Almost Full alert, Apple recommends reviewing the storage recommendations available in Settings > General > iPhone Storage. These recommendations can identify opportunities to optimize storage, such as offloading unused apps, reviewing large attachments, or removing unnecessary content. Therefore, option D is correct. Erasing all content and settings is unnecessarily destructive and is not an appropriate first response to low storage. Turning off iCloud Backup does not meaningfully free the iPhone’s local storage because iCloud storage and device storage are separate. System Data also cannot normally be manually cleared through a dedicated “Clear System Data” control. Reviewing Apple’s built-in storage recommendations provides the safest and most targeted way to recover space.

================

Managed Apple Accounts are created, owned, and managed by an organization and are specifically designed to keep organizational information separate from a user’s personal data. Therefore, organization data and documents are associated with the Managed Apple Account, making option D correct. Apple’s account-driven enrollment architecture allows a Managed Apple Account and a personal Apple Account to coexist on supported devices while maintaining separation between work and personal information. Personal photos, personally installed applications, and personal account information remain associated with the unmanaged Apple Account unless specifically deployed or managed by the organization. This separation is particularly important in personally owned device deployments because IT management is limited to organizational accounts, managed applications, settings, and information rather than giving the organization unrestricted access to the user’s personal content.

================

Managed Apple Accounts are specifically designed for organizational environments and integrate with account-driven device management enrollment. Apple documents that account-driven User Enrollment and account-driven Device Enrollment allow users to enroll devices for work by signing in with a Managed Apple Account. The Managed Apple Account establishes the organizational identity used during service discovery, authentication, and enrollment. A personal or unmanaged Apple Account does not provide this account-driven organizational enrollment capability. Therefore, option D is correct. Consumer services such as Apple Music are associated primarily with personal Apple Accounts, while some communication services available to ordinary Apple Accounts do not define the organizational capability being tested. Managed Apple Accounts are specifically integrated with Apple Business Manager, Apple School Manager, and compatible device management services to support managed work configurations and organizational data separation.

================

Erasing and reinstalling macOS deletes user accounts, files, and network settings from the Mac. Apple therefore recommends backing up any files that must be preserved and recording the current network configuration before the erase begins. This makes option D correct. Startup Disk does not provide a feature for exporting a network-settings profile, and Setup Assistant cannot recover settings that were not backed up or otherwise preserved. There is also no standard macOS restore option named “Preserve all data” when the startup volume is being erased. Recording details such as Wi-Fi, Ethernet, DNS, proxy, or other required network information makes it easier to reconnect after macOS is reinstalled. A current data backup protects the user’s files, while the written network settings preserve configuration information that the erase would otherwise remove.

================

Quick Start allows an existing iPhone or iPad to assist with setting up and transferring data to a new device. Apple’s current Quick Start instructions state that the current device should be connected to Wi-Fi and have Bluetooth turned on before the new device is placed nearby. These wireless technologies enable discovery and communication during the setup process. Face ID is configured as part of the new-device setup and is not a prerequisite for beginning Quick Start. Quick Start also does not specifically require both devices to be signed in to a Managed Apple Account. Apple additionally documents that organization-enrolled devices can have restrictions affecting Quick Start. Among the supplied choices, having Wi-Fi and Bluetooth enabled is therefore the supported requirement, making option B correct.

================

Starting with iOS 18, iPadOS 18, macOS Sequoia 15, watchOS 11, and visionOS 2, Apple provides Off, Fixed, and Rotating options for Private Wi-Fi Address. Apple documents that when a device joins a new network using WPA2 or stronger security, the Private Wi-Fi Address setting defaults to Fixed. A Fixed private address remains unique to that network but does not periodically rotate. By contrast, when joining a new network that uses weak security or no security, the device defaults to Rotating, which changes the private address every two weeks. MAC address filtering and IP address filtering are network access-control techniques and do not determine the default Private Wi-Fi Address mode. WEP is considered weak security and therefore does not trigger the Fixed default. Thus, WPA2 or WPA3 security is correct.

================

When an iPad cannot join a password-protected Wi-Fi network, one of the first basic checks is to verify that the correct network password is being entered. Apple notes that Wi-Fi passwords are case-sensitive, so incorrect capitalization or characters can prevent authentication. If the correct credentials still fail, additional network-level troubleshooting or assistance from the organization’s network administrator may be necessary. Auto-Join controls whether a previously known network is joined automatically; it does not correct authentication failure. Restarting can be useful later in troubleshooting, but it does not replace verifying credentials. WPA3 Enterprise configuration is controlled by the network administrator rather than the iPad user. Therefore, confirming the correct Wi-Fi password before escalation is the appropriate action.

================

Restoring an iPhone or iPad from an iCloud backup depends on a stable and functioning network connection because backup content must be retrieved from iCloud. When problems occur during an iCloud backup or restore process, Apple recommends verifying network connectivity and, where appropriate, trying another Wi-Fi network. Therefore, option C is the appropriate troubleshooting action. DFU mode is a substantially different recovery procedure and is not the normal response to an iCloud restore error. Turning off Find My or signing out of the Apple Account also does not address a network-related restore failure and can interfere with access to the backup. Using another reliable Wi-Fi network helps determine whether the failure is being caused by the current network, router configuration, filtering, or internet connectivity.

================

When troubleshooting an iPad with a Mac, Finder can present Update and Restore options. Apple distinguishes these operations carefully. Choosing Update attempts to reinstall the device software while retaining the user’s personal data. Apple specifically advises selecting Update rather than Restore in appropriate troubleshooting situations because Update reinstalls the software and keeps personal data. Restore is more destructive: it reinstalls iPadOS while erasing the device’s data. Recovery mode also does not bypass device credentials, remove supervision, or automatically reset device-management enrollment. Therefore, if the objective is to repair or reinstall iPadOS while making the best effort to retain the user’s existing information and settings, using the Update operation from Finder is the appropriate approach. Option A is therefore correct.

================

The USB section of System Information helps determine whether macOS actually detects a USB accessory at the hardware level. Apple troubleshooting guidance instructs users to open System Information and check the USB or Hardware section to confirm that a connected accessory appears in the system report. Therefore, option A is correct. If the device is listed, the Mac recognizes the hardware connection, and troubleshooting can proceed to software, configuration, power, or accessory-specific issues. If it does not appear, the connection, cable, port, hub, power, or accessory itself may need investigation. System Information does not automatically repair USB drivers and does not provide warranty-claim history. It also displays many categories of USB hardware—not merely storage devices—including speakers, adapters, printers, and other attached USB accessories.

================

Removing an enrollment profile disconnects the device from the organization’s management controls. Apple documents that configurations, settings, and managed apps associated with an enrollment profile are removed when the device is unenrolled. Consequently, required security policies—such as managed settings, restrictions, VPN configurations, certificates, or other compliance controls—may disappear, leaving the device noncompliant with organizational requirements. This makes option D correct. Removing enrollment does not erase every personal application and all personal data, and it does not automatically sign the user out of their unmanaged personal Apple Account. A remote device erase is also a separate management command rather than an automatic consequence of manually removing an enrollment profile. User Enrollment is specifically designed so organizational information can be removed while personal information remains separate.

================

The macOS Recovery Log records messages generated while the Mac is operating in macOS Recovery. These messages can help troubleshoot recovery-related operations, including system actions associated with installation, recovery, and other utilities. Apple allows the Recovery Log to display errors only, errors and progress information, or all logged messages. This makes option B the appropriate answer. Recovery logs are not limited to hardware failures or kernel panics, and they do not expose user passwords, encryption secrets, or other sensitive security keys. They also are not designed as an iCloud account or device-activation history database. The Recovery Log can be filtered for specific text and saved to a file when detailed troubleshooting information needs to be reviewed or provided to support personnel.

================

Location Services allows apps, websites, and system services to use information from GPS, Bluetooth, Wi-Fi, cellular networks, and other sources to determine the device’s location. Apple explicitly warns that turning off Location Services causes many important iPhone features to stop working. Individual applications can depend on location information for navigation, nearby recommendations, weather, transportation, location-based reminders, and other personalized functionality. Therefore, some apps cannot provide their complete feature set when Location Services is disabled, making option C correct. This behavior is not limited to supervised devices or Apple-developed applications. Third-party applications can also request location permission. Location Services therefore affects substantially more than Find My or device tracking; it is an operating-system privacy framework used by many applications and system services.

================

A device management service can configure and enforce FileVault on managed Mac computers, making option C correct. Apple provides FileVault device-management payloads that can enable FileVault, control when users are prompted to activate it, specify deferral behavior, and escrow recovery keys to the organization’s management service. FileVault encrypts the Mac startup volume and protects stored data from unauthorized access. Recovery keys are generally escrowed to the device management service rather than to an individual user’s iCloud account. Modern Apple silicon security also does not rely on administrators remotely configuring traditional firmware passwords in the manner described in option B. Likewise, FileVault does not encrypt the disk using an organization signing certificate. The supported administrative security capability among the choices is enabling and managing FileVault.

================

If the VPN tunnel successfully connects but internal resources cannot be reached by their fully qualified domain names, DNS configuration is the most relevant area to examine. DNS translates hostnames and FQDNs into IP addresses. Apple’s VPN configuration documentation supports DNS server addresses, DNS search domains, domain names, and supplemental match domains for VPN connections, including split-DNS configurations. An incorrect DNS server, missing internal search domain, or incorrect match-domain configuration can allow the VPN itself to establish successfully while preventing internal hostnames from resolving. QoS affects traffic prioritization rather than hostname resolution. Screen Time has no role in corporate DNS resolution, and Fastlane restrictions do not address this symptom. Therefore, the DNS settings associated with the VPN connection should be reviewed first.

================

iCloud Backup is available with a personal, unmanaged Apple Account and can also be made available with a Managed Apple Account in supported organizational deployment models. Apple documents that Account-driven Device Enrollment and User Enrollment extend Managed Apple Account services to include contacts, calendars, reminders, notes, iCloud Drive, and iCloud Backup. Therefore, option A is correct. Health and Find My are examples of services that are unavailable to Managed Apple Accounts. Apple One is a consumer subscription bundle and is not a Managed Apple Account service. Organizations can also use Apple Business Manager or Apple School Manager to control which supported iCloud services their Managed Apple Account users can access. This provides organizational control while allowing supported cloud services such as iCloud Backup where appropriate.

================

On a personally owned device using both a Managed Apple Account and a personal, unmanaged Apple Account, Apple separates organizational data from personal data. With User Enrollment and related account-driven enrollment models, managed apps and accounts use the Managed Apple Account, while personal apps and accounts remain associated with the user’s personal Apple Account. Therefore, documents stored in the user’s personal iCloud Drive remain under the user’s control, making option C the best answer. Work-related email, organization-assigned apps, and organization data or documents are managed resources and can be subject to organizational controls, restrictions, or removal when enrollment ends. Apple’s deployment security model is specifically designed to preserve user privacy on personally owned devices while cryptographically separating managed enterprise information from personal information.

================

A flashing folder with a question mark indicates that the Mac cannot find an available startup disk containing a working macOS installation. Apple’s documented troubleshooting procedure is to start the Mac in macOS Recovery and open Disk Utility. Disk Utility can then be used to locate the startup storage device and run First Aid to check and repair its file system. Therefore, option D is correct. Apple Diagnostics focuses primarily on identifying hardware faults and is not the first Recovery utility specified for this startup-screen condition. Startup Security Utility manages security policies and boot-security options, while Share Disk allows files to be transferred between Mac computers. If Disk Utility cannot repair or detect the startup disk, additional recovery, reinstallation, erasure, or hardware service may subsequently be required.

================

Gatekeeper is designed to help ensure that only trusted software runs on a Mac. For software downloaded from outside the App Store, Gatekeeper checks factors such as developer identification, notarization, and whether the software has been altered. Apple also documents that Gatekeeper requests user approval before downloaded software is opened for the first time and tracks the provenance, or origin, of files written by downloaded software. That combination matches option D. Gatekeeper does not automatically reject all software distributed outside the App Store because appropriately signed and notarized applications from identified developers can run. Apple also does not simply review unsigned software as described in option C. Gatekeeper combines code-signing validation, notarization checks, provenance tracking, and first-launch user approval to reduce the risk of users unintentionally executing unsafe software.

================

AirDrop requires both Wi-Fi and Bluetooth. If Bluetooth is off , AirDrop fails as it can’t discover nearby devices.

Option B: AirDrop is built-in, not installed.

Option C: Handoff doesn’t disable AirDrop.

Option D: Hotspot doesn’t affect AirDrop.

Private Wi-Fi Address randomizes the MAC address per network, preventing tracking across Wi-Fi connections.

Option A: App permissions are separate (TCC).

Option C: App Store status isn’t relevant.

Option D: MAC restriction is network-side, not device-side.

Dismissing a captive portal dialog (e.g., for public Wi-Fi) blocks internet access. Visiting captive.apple.com in a browser reopens the sign-in page.

Option B: MDM isn’t relevant for public Wi-Fi.

Option C: IP tracking doesn’t affect captive portals.

Option D: Private Wi-Fi address doesn’t fix this.

The tccutil command in Terminal manages the Transparency, Consent, and Control (TCC) database, controlling app privacy permissions (e.g., camera, microphone). Example: tccutil reset All resets all permissions.

Option B: dscl manages directory services, not privacy.

Option C: ifconfig configures network interfaces.

Option D: Sysadminctl manages system accounts, not TCC.

B: AirDrop works between different accounts if enabled.

C: AirPlay to Mac functions without account matching.

Option A: Handoff requires same account.

Option D: Sidecar needs same account.

Managed Lost Mode (via MDM) locks a supervised iPad and displays a custom message, securing data remotely.

Option A: Activation Lock is preventive, not immediate.

Option C: Find My isn’t MDM-managed this way.

Option D: User action isn’t possible if missing.

Activity Monitor allows running system diagnostics via View > Run System Diagnostics , generating a report for troubleshooting (saved in /var/tmp).

Option B: Console views logs, not runs diagnostics.

Option C: Feedback Assistant submits issues, not runs diagnostics directly.

Option D: Diagnostic Reporter isn’t a macOS app.

Recovery mode is needed if the iPhone is stuck on the Apple logo without progress, indicating a failed boot requiring restore via a Mac/PC.

Option A: Network loss doesn’t trigger this.

Option B: Single-user mode is macOS, not iOS.

Option D: App updates don’t need recovery.

For Apple silicon Macs, hold the power button until startup options appear, then press Command-D to start Apple Diagnostics.

Option A: Shift is for Safe Mode.

Option C: Option-D isn’t valid here.

Option D: D alone works on Intel, not always silicon.

Passkeys (passwordless authentication) require:

B: Two-factor authentication for Apple Account security.

D: iCloud Keychain to store and sync passkeys across devices.

Option A: App-Specific Passwords are for third-party apps, not passkeys.

Option C: Legacy Contact is for data inheritance, unrelated.

Safari profiles (introduced in iOS 17/macOS Sonoma) allow users to separate browsing data (e.g., tabs, bookmarks) and sync them via iCloud. For syncing to work between a Mac and iPhone, Safari must be enabled in the iCloud settings on both devices ( Settings > [user name] > iCloud on iPhone; System Settings > [user name] > iCloud on Mac). This toggle ensures bookmarks, history, tabs, and profiles sync.

Option A is vague; there’s no specific " Profile syncing " setting—Safari syncing covers profiles.

Option B (Safari extensions) isn’t required for profile syncing; extensions sync separately.

Option C is correct, as disabling Safari in iCloud stops all Safari data syncing.

Option D (Private Relay) enhances privacy but doesn’t affect syncing. Verify this in Apple’s " Set up and use iCloud Tabs " (support.apple.com/HT202530), which extends to profiles.

Rapid Security Response delivers urgent security patches between major updates, enhancing protection without a full OS upgrade.

Option B: Notifications aren’t part of this.

Option C: App downloads aren’t restricted.

Option D: No report is displayed.

Universal Clipboard (copy on one device, paste on another) is a Continuity feature requiring same Apple Account and Wi-Fi/Bluetooth.

Option A: iCloud Keychain is iCloud-based, not Continuity.

Option B: Notifications sync but aren’t Continuity.

Option D: Siri is standalone.

MDM restrictions on organization-owned iPhones can disable Erase All Content and Settings to prevent unauthorized wipes.

Option B: Software issues don’t dim options.

Option C: iOS version doesn’t affect this.

Option D: All modern iPhones support it.

Option-clicking the Wi-Fi menu bar icon shows detailed connection info (e.g., IP, channel).

Option B: System Settings doesn’t respond this way.

Option C: Control-click offers basic options.

Option D: Control-click in Settings doesn’t detail this.

macOS supports reading NTFS (Windows default) natively but only writes to it with third-party software. This matches the user’s read-only issue.

Option B: exFAT is fully read/write on macOS.

Option C: FAT32 is read/write compatible.

Option D: macOS Extended is macOS-native and read/write.

The Zoom accessibility feature on macOS enlarges the screen view, making content larger for better visibility. Found in System Settings > Accessibility > Zoom , it offers options like full-screen zoom, picture-in-picture, or split-screen magnification, activated via keyboard shortcuts (e.g., Option-Command-8) or a trackpad gesture.

Option A (Increase Transparency) adjusts UI clarity, not size.

Option B (Zoom) is the correct feature for screen enlargement.

Option C (Assistive Touch) is an iOS feature, not macOS.

Option D (Magnifier) exists on iOS/iPadOS, not as a distinct macOS feature (Zoom serves this purpose). Details are in Apple’s " Use Zoom on your Mac " (support.apple.com/HT210978).

In Settings > Wi-Fi , tapping a network’s info (i) shows the Auto-Join toggle. Disabling it prevents the iPhone from automatically connecting to that network, even if previously joined.

Option A: Ask to Join Networks prompts for new networks, not known ones.

Option B: Auto-Link isn’t an iOS setting.

Option C: Preferred Networks isn’t a toggleable option.

Encrypted iPhone backups to a Mac (via Finder or iTunes) include additional sensitive data that unencrypted backups exclude for security. The two data types exclusive to encrypted backups are:

Health data (C): Includes Health app records (e.g., steps, heart rate), requiring encryption due to privacy laws like HIPAA.

Saved passwords (D): Includes Wi-Fi passwords and website credentials stored in Keychain, protected by encryption.

Option A (Device passcode) isn’t backed up; it’s a user-set code, not data.

Option B (Face ID) settings aren’t backed up; biometric data is hardware-bound.

Option E (Wallet) backups include card details only with encryption, but it’s not exclusive—other Wallet data syncs via iCloud. Apple confirms this in " About encrypted backups on your iPhone " (support.apple.com/HT205220).

iCloud backups on an iPad require sufficient storage space in the user’s iCloud account (5GB free by default, expandable via subscription). If the backup fails, the most common reason is insufficient space, as iCloud won’t proceed if the data exceeds available storage. Check this in Settings > [user name] > iCloud > Manage Storage .

Option A is irrelevant; Managed Apple Accounts support iCloud backups unless restricted by MDM, but the question doesn’t specify this.

Option B (Bluetooth) isn’t required for iCloud backups, which use Wi-Fi.

Option C is correct and a standard troubleshooting step.

Option D (passcode/unlocked) isn’t a requirement; backups occur when locked, on Wi-Fi, and charging. See Apple’s " If you can’t back up to iCloud " (support.apple.com/HT203516).

Instant Hotspot needs:

A: Same Apple Account for seamless recognition.

B: Wi-Fi and Bluetooth enabled for connectivity.

Option C: Mobile provider isn’t relevant.

Option D: IPv6 isn’t a requirement.

To force quit an app via the Dock, Control-click (or right-click) its icon; if unresponsive, “Force Quit” appears in the contextual menu instead of “Quit.” Select it to terminate the app.

Option A: Shift-click doesn’t trigger this menu.

Option C: Fn-click isn’t a standard action.

Option D: Esc-click doesn’t work.

Recovery Lock (MDM feature on supervised Macs) requires entering the recoveryOS password at the Recovery prompt to access macOS Recovery.

Option A: Startup Disk doesn’t handle this.

Option B: Service isn’t needed.

Option D: Bypass Key isn’t a standard term here.

The Option-Command-Esc shortcut opens the Force Quit Applications window on macOS, listing active apps and allowing termination of unresponsive ones.

Option A: Option-Control-power manages power options.

Option B: Control-Command-power restarts the Mac.

Option D: Control-Command-Esc isn’t valid.

Admins reset user passwords in System Settings > Users & Groups , selecting the user and clicking “Reset Password” (macOS Ventura and later).

Option B: Logging in as the user isn’t required.

Option C: Keychain Access manages app passwords, not user accounts.

Option D: “Passwords” isn’t a standalone reset tool.

Health and Activity data on an iPhone is sensitive and tied to the Health app, which includes information like steps, workouts, and medical records. When backing up an iPhone to a Mac, this data is included only if the backup is encrypted. An encrypted backup, created using a password in Finder (macOS Catalina and later) or iTunes (older macOS versions), securely stores Health and Activity data alongside other sensitive information like saved passwords. If the user restored from an unencrypted backup, Health and Activity data would not be included, as unencrypted backups exclude this data by design for privacy reasons.

Option A is incorrect because the backup process doesn’t allow selective exclusion of Health and Activity data during creation; it’s an all-or-nothing inclusion with encryption.

Option B is incorrect because Health and Activity data is backed up to a computer if the backup is encrypted.

Option D is incorrect because the restore process doesn’t offer an option to deselect specific data types like Health and Activity; the backup either includes it (if encrypted) or doesn’t (if unencrypted). This behavior is consistent across iOS versions, including iOS 18 in 2025. For official confirmation, refer to Apple’s support article " What does iCloud back up? " (support.apple.com/HT207428) and " Back up iPhone using your Mac " (support.apple.com/HT201352), which note that Health data requires encryption.

Holding Option and clicking the Wi-Fi menu bar icon reveals advanced options, including “Open Wireless Diagnostics,” which provides detailed network info.

Option B: Regular click shows basic options.

Option C: Right-click doesn’t target SSID for diagnostics.

Option D: Command key doesn’t trigger this.