Apple Apple-Device-Support - Apple Device Support Exam (SUP-2026)

XProtect is Apple’s built-in antivirus technology for macOS. It performs signature-based malware detection using YARA signatures, making option C correct. Apple monitors emerging malware and regularly updates XProtect signatures automatically and independently of normal macOS operating-system updates. XProtect can check applications when they are first launched, when an application changes in the file system, and when new XProtect signatures are installed. It can block known malicious software and also includes technology for remediating malware that has already executed. XProtect does not depend on third-party endpoint applications or a device management service to supply its malware signatures. Although notarization and Gatekeeper work alongside XProtect as parts of macOS malware protection, XProtect is not based solely on notarization hashes distributed through CloudKit.

================

Apple operating systems protect personal information by requiring applications to obtain permission before accessing protected data such as Calendars, Contacts, Photos, Camera, and other sensitive resources. The first time an application attempts to use information belonging to another protected app or service, the system presents a permission request explaining the requested access. A scheduling assistant naturally needs Calendar information to read or create events, so the permission prompt appears when it first attempts that access. The prompt is not dependent on the app being sandboxed through System Settings, nor does App Store approval automatically grant Calendar access. Calendar also does not have to be enabled specifically in iCloud for the privacy permission mechanism to operate. Therefore, option D correctly describes why the request appears.

================

System Integrity Protection (SIP) is a macOS security technology that limits what even the root user can modify or control in protected parts of the operating system. Apple specifically documents that SIP helps prevent software from selecting a startup disk, which makes option C the correct choice. SIP does not block ordinary user activities such as downloading files from external storage, installing approved App Store software, or saving documents outside the user’s home folder. Its purpose is to protect critical system locations and security-sensitive operations from unauthorized modification, including actions performed by processes running with elevated privileges. This protection reduces the ability of malicious software to alter essential macOS components or redirect startup behavior. Therefore, permitting software to select a startup disk is the action restricted by SIP.

================

Restoring an iPhone or iPad from an iCloud backup depends on a stable and functioning network connection because backup content must be retrieved from iCloud. When problems occur during an iCloud backup or restore process, Apple recommends verifying network connectivity and, where appropriate, trying another Wi-Fi network. Therefore, option C is the appropriate troubleshooting action. DFU mode is a substantially different recovery procedure and is not the normal response to an iCloud restore error. Turning off Find My or signing out of the Apple Account also does not address a network-related restore failure and can interfere with access to the backup. Using another reliable Wi-Fi network helps determine whether the failure is being caused by the current network, router configuration, filtering, or internet connectivity.

================

Erasing and reinstalling macOS deletes user accounts, files, and network settings from the Mac. Apple therefore recommends backing up any files that must be preserved and recording the current network configuration before the erase begins. This makes option D correct. Startup Disk does not provide a feature for exporting a network-settings profile, and Setup Assistant cannot recover settings that were not backed up or otherwise preserved. There is also no standard macOS restore option named “Preserve all data” when the startup volume is being erased. Recording details such as Wi-Fi, Ethernet, DNS, proxy, or other required network information makes it easier to reconnect after macOS is reinstalled. A current data backup protects the user’s files, while the written network settings preserve configuration information that the erase would otherwise remove.

================

Apple supports two standard manual methods for updating iOS or iPadOS. Directly on the device, open Settings > General > Software Update and download and install the available update, making option B correct. A user can also connect the iPhone or iPad to a trusted Mac running macOS Catalina or later, select the device in Finder, choose General, and select Check for Update, making option C correct. There is no separate iOS or iPadOS Update application, and operating-system updates are not initiated from the App Store. Another iPhone or iPad cannot function as the update host in the manner described in option D. Finder provides the supported computer-based update path when a wireless update is unavailable or when updating through a Mac is preferred.

================

Wireless Diagnostics is a macOS utility designed to analyze Wi-Fi and related internet-connectivity problems. Apple specifically recommends using Wireless Diagnostics when a Mac can connect to a Wi-Fi router but experiences problems loading webpages, sending or receiving email, or streaming media. Therefore, difficulty loading web pages is the correct answer. Wireless Diagnostics analyzes the network connection and produces detected issues, possible solutions, and information about Wi-Fi best practices. It also creates a diagnostic archive that can be useful to a network administrator or IT support technician. It is not primarily an application-crash diagnostic utility, nor is it intended specifically for investigating Network Time Protocol synchronization. DNS problems may contribute to connectivity symptoms, but the directly documented use case among these options is difficulty loading webpages.

================

When an iPhone or iPad computer backup cannot be restored because it is reported as incompatible, Apple recommends first ensuring that the computer and its device-management software are up to date. On a Mac, that means installing the latest appropriate macOS updates, making option D correct. Compatibility problems can occur when the Mac’s software is too old to properly communicate with or restore data to the device. Apple also recommends checking the iPhone or iPad software version if the backup requires a newer operating system. Keeping the iPhone unlocked or reentering an Apple Account password does not resolve a backup-format compatibility problem. If updating the Mac and device does not resolve the issue, Apple advises trying another backup or an available iCloud backup.

================

Restoring an iPhone through Finder on a Mac performs a computer-based factory restore. Apple states that this process erases the device and installs the latest available iOS software, so option D is correct. This differs from Erase All Content and Settings performed directly on the iPhone, which removes user content and settings but is not the method identified here for reinstalling the latest operating-system software. Recovery Assistant is intended to resolve certain startup problems and is not the standard full factory-restore method described in the question. Erasing a device through Find My remotely removes content but does not represent the Finder-based operating-system reinstall process. In Finder, selecting the iPhone and choosing Restore iPhone causes the computer to erase the device and install the latest compatible iOS release.

================

A Mac system report contains detailed information about the computer’s hardware, network connections, operating system, applications, and other configuration information. Apple specifically states that if you contact Apple Support, providing a copy of the system configuration can assist the support technician. Therefore, option D is correct. A system report does not automatically diagnose and report every damaged hardware component, and it does not grant Apple Support remote access to the Mac. It also does not encrypt and upload all user data to iCloud. The report is instead a structured collection of technical configuration details that can help support personnel understand the Mac environment and isolate possible causes of an issue. System Information allows a user to view, save, print, or send the report when troubleshooting assistance is required.

================