macOS Security Settings for Apple Support Professionals

1. What is a Secure Token in macOS?

A cryptographic key enabling FileVault without password entry

A network authentication certificate

A biometric fingerprint file

A backup encryption key

2. What is the primary difference between App Store and Identified Developer apps in Gatekeeper?

App Store apps are always notarized; Identified Developers are manually signed

Identified Developers require paid certificates

App Store apps cannot use FileVault

Identified Developers must disable System Integrity Protection

3. Which tool is used to check the status of System Integrity Protection?

Csrutil status

Sipctl --check

Spctl --status

Sysctl kernel.sip

4. The macOS recovery partition is protected by which feature?

FileVault 2 only

System Integrity Protection and Secure Boot

Gatekeeper only

Touch ID authentication

5. What does Remote Management allow a support professional to do?

Bypass FileVault encryption

Access and control a Mac remotely with user permission

Disable System Integrity Protection

Override Gatekeeper settings

6. Which Apple Silicon feature enhances security by isolating the operating system from user data?

Secure Boot

Secure Enclave

System Integrity Protection

FileVault 2

7. What is the purpose of the macOS firewall?

Encrypt stored files

Control incoming and outgoing network connections

Prevent app installation

Manage user account access

8. Which privacy setting allows users to control app access to camera and microphone?

Firewall settings

Security & Privacy > Privacy tab

Network settings

Accessibility settings

9. What does XProtect in macOS detect?

Unauthorized network access

Known malware and suspicious files

Weak passwords

Unauthorized hardware modifications

10. Which command disables Gatekeeper temporarily for testing purposes?

Sudo spctl --master-disable

Sudo gatekeeper --off

Defaults write com.apple.gatekeeper

Launchctl unload Gatekeeper

11. Which macOS security feature encrypts the entire startup disk to prevent unauthorized access?

FileVault 2

Gatekeeper

System Integrity Protection

Secure Boot

12. Which feature uses biometric authentication on modern Macs?

FileVault 2

Touch ID

Gatekeeper

System Integrity Protection

13. What does the 'Allow apps downloaded from' setting in Security & Privacy restrict?

Network bandwidth usage

App execution based on source

Disk storage capacity

System update frequency

14. Which setting in System Preferences controls whether unsigned apps can run?

Security & Privacy > General

Network > Firewall

Users & Groups > Login Items

ICloud > Security

15. What is the primary purpose of macOS notarization?

Encrypt user files

Verify apps for malware before execution

Manage user permissions

Backup system files

16. Which security feature prevents even Apple from accessing user data on encrypted drives?

Secure Token

FileVault 2 encryption

Gatekeeper notarization

T2 Security Chip

17. What is the default state of FileVault 2 on modern macOS systems?

Always enabled

Always disabled

Optional; depends on user configuration

Enabled only on Apple Silicon Macs

18. Which command-line tool is used to manage code signing and app security policies?

Codesign

Spctl

Softwareupdate

Diskutil

19. In macOS, Gatekeeper controls which of the following?

Disk encryption levels

Application execution and origin verification

Firewall port management

User account permissions

20. What does System Integrity Protection (SIP) primarily protect against?

Unauthorized app installation

Malware and rootkit attacks

Network intrusions

Password brute-force attacks

Apple Support Professional macOS Security Settings Quiz

1. What is a Secure Token in macOS?

2.

What first name or nickname would you like us to use?

2. What is the primary difference between App Store and Identified Developer apps in Gatekeeper?

3. Which tool is used to check the status of System Integrity Protection?

4. The macOS recovery partition is protected by which feature?

5. What does Remote Management allow a support professional to do?

6. Which Apple Silicon feature enhances security by isolating the operating system from user data?

7. What is the purpose of the macOS firewall?

8. Which privacy setting allows users to control app access to camera and microphone?

9. What does XProtect in macOS detect?

10. Which command disables Gatekeeper temporarily for testing purposes?

11. Which macOS security feature encrypts the entire startup disk to prevent unauthorized access?

12. Which feature uses biometric authentication on modern Macs?

13. What does the 'Allow apps downloaded from' setting in Security & Privacy restrict?

14. Which setting in System Preferences controls whether unsigned apps can run?

15. What is the primary purpose of macOS notarization?

16. Which security feature prevents even Apple from accessing user data on encrypted drives?

17. What is the default state of FileVault 2 on modern macOS systems?

18. Which command-line tool is used to manage code signing and app security policies?

19. In macOS, Gatekeeper controls which of the following?

20. What does System Integrity Protection (SIP) primarily protect against?