Full Disk Access is a high-privilege macOS privacy permission that allows an app to access protected data across the Mac, including information belonging to other apps, Time Machine backups, and certain administrative settings. A standard user does not have the administrative authority required for this type of system-level change, so administrator authorization is required, making option B correct. The restriction is not based on whether the application has sandbox entitlements, and the utility does not first need to be launched by an administrator. Notarization also does not grant Full Disk Access; notarization verifies software integrity and checks for known malicious content, while Full Disk Access is a separate privacy permission. Apple exposes these controls under System Settings > Privacy & Security > Full Disk Access.

================

iCloud Backup is available with a personal, unmanaged Apple Account and can also be made available with a Managed Apple Account in supported organizational deployment models. Apple documents that Account-driven Device Enrollment and User Enrollment extend Managed Apple Account services to include contacts, calendars, reminders, notes, iCloud Drive, and iCloud Backup. Therefore, option A is correct. Health and Find My are examples of services that are unavailable to Managed Apple Accounts. Apple One is a consumer subscription bundle and is not a Managed Apple Account service. Organizations can also use Apple Business Manager or Apple School Manager to control which supported iCloud services their Managed Apple Account users can access. This provides organizational control while allowing supported cloud services such as iCloud Backup where appropriate.

================

If macOS is malfunctioning but the user needs to preserve applications, files, and personal data, Reinstall macOS from macOS Recovery is the appropriate option. Apple explicitly states that reinstalling macOS normally does not remove applications or personal data, although creating a backup beforehand is still recommended. Therefore, option C is correct. Startup Security Utility is used to configure startup security policies rather than reinstall the operating system. Disk Utility can diagnose, repair, partition, or erase storage devices but does not itself reinstall macOS. Recovery Assistant provides recovery-related workflows but is not the primary option for reinstalling the operating system while preserving existing user data. Reinstalling from Recovery replaces the operating-system components while leaving the existing data volume intact under normal circumstances.

================

System Integrity Protection (SIP) is a macOS security technology that limits what even the root user can modify or control in protected parts of the operating system. Apple specifically documents that SIP helps prevent software from selecting a startup disk, which makes option C the correct choice. SIP does not block ordinary user activities such as downloading files from external storage, installing approved App Store software, or saving documents outside the user’s home folder. Its purpose is to protect critical system locations and security-sensitive operations from unauthorized modification, including actions performed by processes running with elevated privileges. This protection reduces the ability of malicious software to alter essential macOS components or redirect startup behavior. Therefore, permitting software to select a startup disk is the action restricted by SIP.

================

XProtect is Apple’s built-in antivirus technology for macOS. It performs signature-based malware detection using YARA signatures, making option C correct. Apple monitors emerging malware and regularly updates XProtect signatures automatically and independently of normal macOS operating-system updates. XProtect can check applications when they are first launched, when an application changes in the file system, and when new XProtect signatures are installed. It can block known malicious software and also includes technology for remediating malware that has already executed. XProtect does not depend on third-party endpoint applications or a device management service to supply its malware signatures. Although notarization and Gatekeeper work alongside XProtect as parts of macOS malware protection, XProtect is not based solely on notarization hashes distributed through CloudKit.

================

Activity Monitor can generate a System Diagnostics report containing information about the current status of the Mac. Apple states that the report is based on different system logs and can be saved and supplied to Apple Support for troubleshooting. Therefore, option B is correct. A System Diagnostics report is a collection of diagnostic information; it does not automatically provide step-by-step hardware repair instructions. It also is not designed as a cache-clean ing guide or a list of required operating-system updates. Activity Monitor provides several related diagnostic functions, including Sample Process, Spindump, System Diagnostics, and Spotlight Diagnostics. System Diagnostics is particularly useful when detailed system-state information must be captured so a support technician or administrator can investigate complex performance or operating-system problems.

================

When troubleshooting an iPad with a Mac, Finder can present Update and Restore options. Apple distinguishes these operations carefully. Choosing Update attempts to reinstall the device software while retaining the user’s personal data. Apple specifically advises selecting Update rather than Restore in appropriate troubleshooting situations because Update reinstalls the software and keeps personal data. Restore is more destructive: it reinstalls iPadOS while erasing the device’s data. Recovery mode also does not bypass device credentials, remove supervision, or automatically reset device-management enrollment. Therefore, if the objective is to repair or reinstall iPadOS while making the best effort to retain the user’s existing information and settings, using the Update operation from Finder is the appropriate approach. Option A is therefore correct.

================

Apple provides a visible supervision notice directly in the main Settings screen of a supervised iPhone or iPad. The supervision information appears below the Search field and above the Apple Account area, so option A identifies the correct location. Current Apple documentation describes wording similar to “This iPhone is supervised,” followed by information about the organization’s management capabilities. Supervision generally indicates that an organization owns or has enhanced management control over the device, commonly through Automated Device Enrollment. The notice is not limited to the VPN & Device Management section, does not appear as a simple “Supervised” status under About, and individual managed settings do not each display a supervision flag. Checking the main Settings screen is therefore the direct method for confirming supervision.

================

A functioning network connection is required for an iPad to upload its backup to iCloud. Apple documents that automatic iCloud backups normally occur when the device is connected to power, locked, and connected to Wi-Fi. Consequently, if an iCloud backup fails, confirming that the iPad has a working Wi-Fi connection is an appropriate troubleshooting step. Bluetooth is not required for iCloud Backup. The device also does not need to remain unlocked; automatic backups are specifically designed to occur while it is locked. Signing in with a Managed Apple Account is not the general solution to a failed backup because the relevant Apple Account and organizational configuration depend on how the device is deployed. The network connection must be functional so the backup data can communicate with Apple’s iCloud services.

================

Apple structures macOS malware protection around three defensive layers. The first layer helps prevent malware from launching or executing through technologies including the App Store, Gatekeeper, and Notarization. The second layer identifies and blocks malware from running through Gatekeeper, Notarization, and XProtect. The third layer uses XProtect to remediate malware that has already executed. Therefore, the overall objective is to prevent, block, and remediate malware execution, making option B correct. macOS does not prohibit all third-party applications or restrict software exclusively to notarized App Store applications. Apple permits applications distributed outside the Mac App Store when they satisfy appropriate signing, notarization, and Gatekeeper requirements. The three-layer architecture provides defense before execution, during attempted execution, and after an infection has occurred.

================