Courseiva

CCNA macOS Features and Tools Questions

30 questions · macOS Features and Tools · All types, answers revealed

Practice these questionsDomain overviewAll questions
1
MCQeasy

A user calls the help desk saying that after upgrading to macOS Ventura, the 'Documents' folder in the sidebar keeps disappearing after every reboot. They need it to stay visible. Which macOS feature or tool should you use to fix this?

A.System Settings > Desktop & Dock
B.Finder > Preferences > Sidebar
C.Terminal command 'defaults write com.apple.finder ShowSidebar -bool true'
D.Spotlight Preferences
AnswerB

This is exactly where users enable or disable folder visibility in the Finder sidebar.

Why this answer

The correct answer is Finder Preferences because sidebar visibility of folders is controlled there, not in System Settings or via Spotlight. This question tests knowledge of basic macOS UI customization, a common support task.

Practice this question →
2
MCQmedium

A graphic designer is running out of storage space on their MacBook Air. They have a large collection of old design files that they rarely access but want to keep available on demand without manual intervention. Which macOS feature should you enable to automatically free up space?

A.Enable Time Machine to an external drive
B.Turn on iCloud Drive and select 'Optimize Mac Storage'
C.Use Disk Utility to erase and repartition the drive
D.Configure a local Time Machine snapshot schedule
AnswerB

This setting automatically stores older files in iCloud and keeps space-optimized versions locally, freeing up disk space.

Why this answer

iCloud Drive with 'Optimize Mac Storage' automatically moves rarely used files to iCloud and keeps recent files locally. This is the correct feature for automatic space management. Manual archiving or external drives require user action, and Time Machine is for backups only.

Practice this question →
3
MCQhard

A user reports that their Mac running macOS Ventura frequently asks for the admin password when trying to change network settings, even though they are the only user. They want this to stop. What is the most secure way to address this?

A.Disable System Integrity Protection (SIP)
B.Change the user account type from Standard to Administrator in Users & Groups
C.Use the 'security authorizationdb' command to remove the requirement
D.Turn off FileVault
AnswerB

Admin accounts can change network settings without re-entering credentials. This is the standard fix, though it broadens privileges.

Why this answer

Changing network settings requires admin privileges by default for security. The correct approach is to grant the user admin rights, which eliminates the prompt but also gives full system access. Other options either don't work or compromise security.

Practice this question →
4
MCQhard

A security incident has occurred: a user's Mac running macOS Ventura was infected with malware that modified system files. The technician needs to boot the Mac into a mode that loads only essential Apple-signed kernel extensions and prevents third-party software from loading, in order to safely remove the malware. Which startup mode should they use?

A.Single-user mode (Command + S).
B.Verbose mode (Command + V).
C.Safe Mode (Shift key during startup).
D.Target Disk Mode (T key).
AnswerC

Safe Mode disables all non-Apple kernel extensions, startup items, and login items, providing a clean environment to remove malware. It also checks the startup disk for errors.

Why this answer

Safe Mode (holding Shift during startup) loads only essential kernel extensions and disables all third-party startup items and login items. It also performs a directory check of the startup volume. This environment is ideal for troubleshooting and removing malware without interference.

Single-user mode (Command+S) boots to a command-line interface but is deprecated on Apple Silicon Macs and does not inherently prevent malware from loading.

Practice this question →
5
MCQmedium

A user reports that their MacBook Pro running macOS Big Sur will not boot past the Apple logo. You suspect a corrupted system file. You need to boot into a special mode to run Disk Utility's First Aid on the startup volume. Which key combination should you hold during startup?

A.Hold the Option (⌥) key.
B.Hold Command (⌘) + R.
C.Hold the Shift key.
D.Hold Command (⌘) + Option (⌥) + P + R.
AnswerB

This boots into macOS Recovery, where Disk Utility is available. Running First Aid can repair disk errors that may be preventing the system from booting.

Why this answer

Holding Command (⌘) and R during startup boots the Mac into macOS Recovery, which provides access to Disk Utility, Terminal, and the ability to reinstall macOS. From there, you can run First Aid on the startup disk. Option (⌥) boots into Startup Manager, and Shift boots into Safe Mode.

Practice this question →
6
MCQmedium

A graphic designer reports that their MacBook Pro running macOS Monterey suddenly shows a gray screen with a folder icon containing a question mark at startup. They have important client files on the internal SSD. What is the most likely cause of this issue?

A.The user’s Time Machine backup has failed
B.The firmware password is enabled
C.macOS cannot locate a valid boot volume or system folder
D.The user’s login keychain is corrupted
AnswerC

This is the classic symptom of a missing or corrupted boot volume, often fixable via Recovery Mode or Disk Utility.

Why this answer

The folder with a question mark indicates the system cannot find a valid boot volume. This is often due to a corrupted boot loader or disconnected internal drive, not a failed backup or simple login issue.

Practice this question →
7
MCQmedium

A user complains that their Mac running macOS Big Sur suddenly shows a message 'Your system has run out of application memory' and applications crash frequently. Activity Monitor shows high memory pressure. What is the most effective built-in tool to diagnose the cause?

A.Console
B.Disk Utility
C.Activity Monitor
D.System Information
AnswerC

Activity Monitor's Memory tab shows memory pressure, usage per app, and can help identify the culprit.

Why this answer

Activity Monitor is the primary tool for viewing memory usage, identifying memory-hungry processes, and checking memory pressure. It helps pinpoint which app is leaking or consuming excessive RAM.

Practice this question →
8
MCQeasy

A user complains that their MacBook Air running macOS Monterey frequently runs out of memory and slows down when they have multiple browser tabs and apps open. They want to see which processes are consuming the most memory without installing third-party software. Which macOS tool should you instruct them to use?

A.Force Quit Applications window (Cmd+Option+Esc).
B.System Preferences > Memory.
C.Terminal with the 'top' command.
D.Activity Monitor from the Utilities folder.
AnswerD

Activity Monitor provides a graphical interface to view memory usage, CPU load, and other system metrics. It is the appropriate tool for this scenario.

Why this answer

Activity Monitor is the built-in macOS utility that displays real-time system resource usage, including memory, CPU, energy, disk, and network. The Memory tab shows memory pressure and per-process memory consumption, helping identify memory hogs. Force Quit is only for terminating applications, not for monitoring.

Practice this question →
9
MCQmedium

A technician is troubleshooting a Mac that fails to connect to a Wi-Fi network. The network is visible, but entering the correct password results in an 'unable to join the network' error. The technician wants to delete the saved network configuration to start fresh. Which macOS tool or location should they use?

A.System Settings > Network > Wi-Fi > Details > Remove this network.
B.Keychain Access and delete the Wi-Fi password entry.
C.Terminal with the 'networksetup -setairportnetwork' command.
D.System Information > Network > Wi-Fi.
AnswerA

This is the correct graphical method to forget a Wi-Fi network. It removes the saved password and any custom network settings, allowing a fresh connection attempt.

Why this answer

The Network pane in System Settings allows you to manage network interfaces, including Wi-Fi. By selecting the Wi-Fi interface and clicking 'Advanced' or 'Details', you can see a list of preferred networks and remove the problematic one. This clears the saved password and settings.

Keychain Access stores passwords but not network configurations, and Terminal is not the standard method.

Practice this question →
10
MCQeasy

A graphic designer needs to create a bootable macOS installer on an external SSD to deploy macOS Sonoma to multiple iMacs in the office. They have the 'Install macOS Sonoma.app' file. Which built-in macOS tool should they use to create the bootable drive?

A.Disk Utility to restore the .app file to the SSD.
B.System Information to verify the SSD is bootable.
C.Terminal with the 'createinstallmedia' command.
D.Migration Assistant to copy the app to the SSD.
AnswerC

This is the correct built-in tool. The command syntax is 'sudo /Applications/Install macOS Sonoma.app/Contents/Resources/createinstallmedia --volume /Volumes/MyVolume'. It creates a bootable installer.

Why this answer

The 'createinstallmedia' command in Terminal is the official Apple tool for creating a bootable macOS installer from an application bundle. It writes the installer to the target volume and makes it bootable. Disk Utility can erase the drive but cannot create the installer media, and System Information does not have this capability.

Practice this question →
11
MCQhard

A user reports that their MacBook Air running macOS Monterey will not connect to a Wi-Fi network that other devices can connect to. The Wi-Fi menu shows the network but clicking it does nothing. Which macOS tool should you use to reset the Wi-Fi configuration?

A.Network Utility
B.Wireless Diagnostics
C.System Information > Wi-Fi
D.Terminal command 'sudo ifconfig en0 down'
AnswerB

Wireless Diagnostics, when launched with Option-click on the Wi-Fi icon, offers a 'Monitor' and 'Log' but also a 'Wi-Fi Reset' option that clears saved networks and preferences.

Why this answer

The 'Wireless Diagnostics' tool includes a 'Monitor' mode and a 'Log' feature, but more importantly, it provides a 'Scan' and 'Info' view. However, to reset Wi-Fi configuration, you often need to remove plist files or use the 'Assist me' option in Network settings. The correct answer is Wireless Diagnostics because it offers a 'Wi-Fi Reset' option under the Window menu.

Practice this question →
12
MCQhard

During a forensic investigation, a technician needs to recover files that a user deleted from their Mac's internal SSD several days ago. The Trash has been emptied. Which macOS feature or tool should be attempted first to recover these files?

A.Use the Terminal command 'fs_usage' to locate the deleted files
B.Restore from a Time Machine backup
C.Run Disk Utility First Aid on the SSD
D.Use a third-party file recovery tool immediately
AnswerB

If Time Machine was enabled, you can browse backups and restore the deleted files from before they were deleted.

Why this answer

Time Machine backups are the primary method for recovering deleted files on macOS, assuming backups were configured. If no backup exists, file recovery from an SSD is extremely difficult due to TRIM, and third-party tools may not work. Terminal commands like 'fs_usage' are for monitoring, not recovery.

Disk Utility cannot recover deleted files.

Practice this question →
13
MCQmedium

A small business uses a shared iMac for customer check-ins. The manager wants to restrict which apps users can open and prevent changes to system settings without creating separate user accounts. Which macOS feature should you configure to meet this requirement?

A.Enable FileVault full-disk encryption
B.Configure Parental Controls (Screen Time) for the user account
C.Use the Guest User account
D.Apply a firmware password
AnswerB

Parental Controls (under Screen Time) allow you to limit app usage, block specific apps, and restrict system settings changes for a standard user.

Why this answer

Managed Apple IDs are for enterprise management but require an MDM. Parental Controls (now Screen Time) can limit app usage and settings changes for standard users. However, the most robust solution is using Configuration Profiles via an MDM, but the question asks for a built-in feature.

Guided Access is for iOS, not macOS. The correct answer is to use Parental Controls (Screen Time) to set app and settings restrictions for a standard user account.

Practice this question →
14
MCQhard

A technician needs to deploy a custom configuration profile to 20 Mac computers in a small office without using a third-party MDM. The profile must enforce Wi-Fi settings and disable iCloud. Which macOS tool can create and sign this configuration profile?

A.Apple Configurator
B.System Settings > Profiles
C.Terminal with 'profiles' command
D.Profile Manager in macOS Server
AnswerA

Apple Configurator allows you to create, edit, and sign configuration profiles for macOS and iOS, suitable for small deployments without MDM.

Why this answer

Apple Configurator is a free tool from the Mac App Store that can create, sign, and export configuration profiles (.mobileconfig files). These profiles can then be distributed manually or via email. System Preferences cannot create profiles, and Profile Manager is part of macOS Server, which is deprecated.

Terminal cannot natively create signed profiles without additional tools.

Practice this question →
15
MCQeasy

A user reports that their MacBook Pro running macOS Ventura is unable to open any applications after a recent system update. They see a spinning beach ball when clicking app icons. Which macOS tool should you use first to diagnose and resolve this issue?

A.Terminal
B.Activity Monitor
C.Disk Utility
D.System Information
AnswerB

Activity Monitor shows real-time system resource usage, allowing you to identify processes consuming excessive CPU or memory, which is the correct first step.

Why this answer

Activity Monitor is the primary macOS tool for viewing CPU, memory, energy, disk, and network usage. In this scenario, it can help identify a runaway process or memory pressure causing the system to hang. Force quitting unresponsive apps is a secondary step, but Activity Monitor first provides the diagnostic data needed.

Practice this question →
16
MCQmedium

A user has accidentally deleted several important files from their Documents folder on their Mac running macOS Ventura. They need to recover them immediately. Which built-in macOS tool should you guide them to use first?

A.Time Machine from the menu bar.
B.The Trash folder in the Dock.
C.Terminal with the 'cd' and 'ls' commands.
D.System Settings > General > Storage.
AnswerB

When files are deleted normally, they are moved to the Trash. The user can open the Trash, select the files, and choose 'Put Back' to restore them to their original location.

Why this answer

The Trash folder on macOS stores deleted files until it is emptied. If the user has not emptied the Trash, they can simply open the Trash icon in the Dock, locate the files, and drag them back to the Documents folder. Time Machine requires a backup to exist, and Terminal commands are unnecessary here.

Practice this question →
17
MCQmedium

A technician is troubleshooting a Mac that fails to boot and displays a prohibitory symbol (a circle with a slash). The user had recently installed a new third-party SSD. What is the most likely cause?

A.The SSD is formatted as NTFS
B.The SSD is not properly connected or is incompatible with the Mac’s storage controller
C.The user’s home folder is corrupted
D.The Mac’s NVRAM needs resetting
AnswerB

Incompatible or improperly connected drives prevent macOS from loading, shown by the prohibitory symbol.

Why this answer

The prohibitory symbol means macOS is found but cannot load due to incompatibility or corruption. A third-party SSD without proper firmware or formatting is a common cause, especially on newer Macs with T2 or Apple Silicon.

Practice this question →
18
MCQeasy

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

A.Keychain Access
B.System Settings > Privacy & Security
C.Console
D.Terminal with 'tccutil' command
AnswerB

This is the correct location to view and manage app permissions for camera, microphone, and other privacy-sensitive features.

Why this answer

The Security & Privacy pane in System Settings (or System Preferences in older macOS) contains the Privacy tab where app permissions for camera, microphone, location, and more are listed. This is the standard location for auditing privacy permissions on macOS.

Practice this question →
19
MCQhard

A technician needs to deploy a custom configuration profile to 50 macOS devices in a lab. The profile must restrict access to System Settings and disable iCloud. Which tool is most appropriate for this task?

A.Terminal with 'profiles' command
B.Apple Configurator
C.System Preferences > Profiles
D.Remote Desktop
AnswerB

Apple Configurator allows creating and exporting configuration profiles (.mobileconfig) for macOS and iOS devices.

Why this answer

Apple Configurator is designed for creating and deploying configuration profiles to iOS and macOS devices. For large-scale deployments, MDM is preferred, but Configurator is the direct tool for profile creation and local deployment.

Practice this question →
20
MCQmedium

A user calls the help desk because their MacBook Pro running macOS Sonoma suddenly shows a folder with a flashing question mark when booting. They were not performing any system updates. Which macOS tool or feature should you use to attempt to repair the startup volume?

A.Boot to Recovery mode and run Disk Utility First Aid
B.Use the Terminal command 'sudo fsck -fy' at boot
C.Reinstall macOS from Internet Recovery
D.Enable Target Disk Mode on the Mac
AnswerA

This is the standard method to check and repair the startup disk's file system structure, which can resolve the missing boot volume issue.

Why this answer

The flashing question mark indicates the system cannot find a valid startup volume. Booting to macOS Recovery and using Disk Utility's First Aid is the correct procedure to repair disk errors. Reinstalling macOS is a later step if repair fails.

Target Disk Mode is for transferring files between Macs, not for repairing.

Practice this question →
21
MCQeasy

A small business owner wants to ensure that only authorized users can access their iMac. They need to set up separate accounts for three employees, each with a username and password, and restrict one employee from installing software. Which macOS feature should they use to create and manage these user accounts?

A.System Settings > Users & Groups.
B.Terminal with the 'dscl' command.
C.System Information > Software > Installations.
D.Keychain Access to create user passwords.
AnswerA

This is the correct graphical interface for managing user accounts. From here, you can create new users, set passwords, and change account types to restrict privileges.

Why this answer

System Settings (formerly System Preferences) contains the Users & Groups pane, which is the central location for creating, deleting, and managing user accounts on macOS. It allows setting account types (Administrator, Standard, Managed with Parental Controls) to control permissions and software installation. Terminal commands exist but are not the recommended primary tool for this task.

Practice this question →
22
MCQmedium

A technician is configuring a new Mac mini for a kiosk application. The kiosk should run only a single web browser in full-screen mode, and users should not be able to exit the app or access the desktop. Which macOS feature should be used to enforce this?

A.Enable Guided Access in Accessibility settings
B.Configure a user account with Parental Controls set to allow only the browser app
C.Use the 'Single App Mode' setting in System Settings
D.Set the browser as a Login Item for a standard user
AnswerB

Parental Controls (Screen Time) can limit the user to a single app, and combined with auto-login and the app set as a login item, this approximates kiosk mode.

Why this answer

Guided Access is an iOS feature, not available on macOS. Single App Mode is a configuration available through Mobile Device Management (MDM) profiles, not a built-in GUI feature. The built-in macOS feature that can achieve this is to create a user account with Parental Controls (Screen Time) set to allow only a specific app, combined with auto-login and the app set to launch at login.

However, the most direct built-in tool is to use the 'Login Items' and 'App Limits' in Screen Time, but for true kiosk mode, a third-party tool or MDM is often needed. Among the options, the best built-in approach is to use Parental Controls to restrict apps.

Practice this question →
23
MCQmedium

A user reports that their MacBook Air running macOS Monterey is running slowly and they suspect a startup item is consuming resources. They want to see which applications launch automatically at login and disable unnecessary ones. Which macOS tool should they use?

A.Activity Monitor and sort by CPU usage.
B.System Settings > General > Login Items.
C.Terminal with the 'launchctl list' command.
D.Force Quit Applications window.
AnswerB

This is the correct location to view and manage login items. The user can remove unnecessary applications to speed up the login process and reduce background resource usage.

Why this answer

System Settings > General > Login Items (or System Preferences > Users & Groups > Login Items on older macOS) lists all applications and services that start automatically when the user logs in. From there, the user can select an item and click the minus button to disable it. Activity Monitor shows running processes but does not manage startup items.

Practice this question →
24
MCQeasy

A small business owner wants to restrict app installations on company Macs to only the Mac App Store to prevent employees from downloading unapproved software. Which macOS security feature should you configure?

A.FileVault
B.System Integrity Protection (SIP)
C.Gatekeeper
D.Parental Controls
AnswerC

Gatekeeper allows administrators to set allowed app sources: App Store, App Store and identified developers, or anywhere.

Why this answer

Gatekeeper controls where apps can be installed from. Setting it to 'App Store' restricts installations to only Mac App Store apps, meeting the business requirement.

Practice this question →
25
MCQeasy

A school IT administrator needs to remotely lock a lost MacBook and display a custom message with contact information. The MacBook is enrolled in the school’s MDM and has an internet connection. Which macOS feature should they use?

A.Remote Desktop
B.Find My Mac
C.FileVault
D.Terminal command 'sudo pmset'
AnswerB

Find My Mac allows locking, erasing, and displaying a message on the lost device via iCloud.

Why this answer

Find My Mac is the built-in Apple feature for locating, locking, and erasing lost devices. For MDM-enrolled devices, the school can also use their MDM solution, but Find My Mac is the direct user-facing tool.

Practice this question →
26
MCQhard

A user on a Mac running macOS Big Sur needs to share a folder on their local network with a Windows colleague. The user wants the folder to appear as a network drive on the Windows machine without installing additional software. Which macOS feature should they enable and configure?

A.Screen Sharing in System Settings > Sharing.
B.File Sharing in System Settings > Sharing, and ensure SMB is enabled.
C.Internet Sharing in System Settings > Sharing.
D.Remote Login in System Settings > Sharing.
AnswerB

File Sharing with SMB is the standard way to share folders with Windows clients. The user must also add the specific folder to the Shared Folders list and set appropriate permissions.

Why this answer

File Sharing in System Settings uses SMB (Server Message Block) protocol, which is natively supported by Windows. By enabling File Sharing and adding the folder to the Shared Folders list, the Mac acts as an SMB server. The Windows user can then connect to it using the Mac's IP address or hostname.

Screen Sharing is for remote desktop, not file sharing.

Practice this question →
27
MCQmedium

A user reports that their MacBook Pro running macOS Monterey frequently displays a message saying 'Your system has run out of application memory.' They have 16 GB of RAM and are only using Safari and Mail. Which macOS tool should you use to investigate the cause?

A.System Information
B.Terminal with 'vm_stat' command
C.Activity Monitor
D.Console
AnswerC

Activity Monitor's Memory tab displays memory pressure and per-process usage, allowing you to diagnose memory issues.

Why this answer

The 'application memory' message indicates that the system's memory pressure is high. Activity Monitor's Memory tab shows memory pressure graphically and lists memory usage by process. This is the correct tool to identify if a specific process is leaking memory or if there is a hardware issue.

System Information does not show live memory usage.

Practice this question →
28
MCQeasy

A user reports that their MacBook Pro running macOS Ventura suddenly lost all desktop icons and the menu bar is missing. They can still move the cursor and click on open applications. Which macOS feature or tool should you use to restore the desktop and menu bar?

A.Restart the MacBook by holding the power button.
B.Open Activity Monitor and force quit the WindowServer process.
C.Use Force Quit (Cmd+Option+Esc) and select Finder, then click Relaunch.
D.Run the command 'sudo killall Dock' in Terminal.
AnswerC

This is the correct method to restart the Finder process, which controls the desktop, menu bar, and file system display. It is a standard macOS troubleshooting step.

Why this answer

The scenario describes a Finder crash, which often causes the desktop, menu bar, and icons to disappear. Relaunching Finder via the Force Quit Applications window restores these elements without rebooting the entire system. This is a common troubleshooting step for macOS GUI issues.

Practice this question →
29
MCQhard

A user's MacBook Air running macOS Ventura is experiencing intermittent kernel panics. The crashes seem to occur when the laptop is connected to a specific USB-C hub. Which macOS tool should you use to analyze the crash logs and identify the faulty driver?

A.System Information
B.Console
C.Activity Monitor
D.Terminal with 'sudo dmesg' command
AnswerB

Console allows you to view kernel panic logs and filter them by date and process to identify the problematic driver.

Why this answer

Console is the macOS tool for viewing system logs, including kernel panic logs. These logs contain stack traces that can point to a specific kernel extension (kext) or driver. System Information shows hardware but not crash details.

Terminal with 'log show' can also retrieve logs, but Console provides a graphical interface for filtering and analysis.

Practice this question →
30
MCQmedium

During a macOS deployment, you need to create a bootable USB installer for macOS Sonoma to upgrade multiple iMacs. You have the 'Install macOS Sonoma' app in the Applications folder. Which command-line tool should you use to create the installer?

A.diskutil
B.asr
C.createinstallmedia
D.hdiutil
AnswerC

This is the correct command, typically used as: sudo /Applications/Install\ macOS\ Sonoma.app/Contents/Resources/createinstallmedia --volume /Volumes/MyVolume

Why this answer

The 'createinstallmedia' utility is the built-in Apple tool for creating bootable macOS installers. It must be run from Terminal with the correct path to the installer app and the target volume.

Practice this question →

Ready to test yourself?

Try a timed practice session using only macOS Features and Tools questions.

Start 20-question session