ACSP iCloud and Apple Accounts — Questions and Answers
Question 1: What is the primary difference between a personal Apple ID and a Managed Apple ID (MAID)?
- Managed Apple IDs are created and controlled by an organization via Apple Business Manager or Apple School Manager (Correct answer)
- Managed Apple IDs support iCloud Drive while personal Apple IDs do not
- Personal Apple IDs require two-factor authentication; Managed Apple IDs do not
- Managed Apple IDs can only be used on iPhone, not on Mac
Correct answer: Managed Apple IDs are created and controlled by an organization via Apple Business Manager or Apple School Manager
Managed Apple IDs are owned and administered by the organization through Apple Business Manager (ABM) or Apple School Manager (ASM). The organization controls password resets, restricts certain personal iCloud services, and can delete the account when an employee leaves — unlike a personal Apple ID which the individual owns.
Question 2: A user enables iCloud Keychain on their Mac. Which of the following types of data does iCloud Keychain synchronize across the user's Apple devices?
- Application preferences and window layouts
- Full Time Machine backup snapshots
- Passwords, passkeys, credit card numbers, and Wi-Fi passwords (Correct answer)
- MDM enrollment profiles and device certificates
Correct answer: Passwords, passkeys, credit card numbers, and Wi-Fi passwords
iCloud Keychain securely syncs passwords, passkeys, credit card numbers, and Wi-Fi passwords across all Apple devices signed in with the same Apple ID using end-to-end encryption. System-level items like MDM profiles and application layout data are not part of iCloud Keychain.
Question 3: A Mac shows 'Waiting for approval' when a user attempts to sign in to iCloud. What is the most likely cause?
- The Mac's serial number is not registered with Apple
- Two-factor authentication is enabled and a trusted device or phone number must supply a verification code (Correct answer)
- iCloud services are experiencing an outage
- The Mac's firmware must be updated before iCloud sign-in is permitted
Correct answer: Two-factor authentication is enabled and a trusted device or phone number must supply a verification code
When two-factor authentication is active on an Apple ID, signing in on a new device pauses and requests a six-digit verification code sent to a trusted device or phone number already associated with the account. Without that code, the sign-in cannot complete.
Question 4: Which iCloud Continuity feature lets a user start composing an email on iPhone and immediately continue editing the same draft on their nearby Mac without any manual file transfer?
- iCloud Drive real-time sync
- AirDrop
- Handoff (Correct answer)
- Universal Clipboard
Correct answer: Handoff
Handoff detects when a supported activity (email, documents, Maps, Safari, etc.) is open on a nearby Apple device signed in to the same Apple ID. A Handoff icon appears in the Dock or App Switcher on the second device, letting the user switch seamlessly. Both devices must have Bluetooth and Wi-Fi enabled.
Question 5: An organization wants employees to use the App Store for company-approved apps on corporate iPhones without allowing personal Apple IDs on those devices. Which combination of Apple services makes this possible?
- iCloud Keychain combined with Screen Time Communication Limits
- Apple Business Manager with Managed Apple IDs deployed via MDM (Correct answer)
- Apple Configurator 2 supervision without any Apple ID
- Family Sharing with the organization as the family organizer
Correct answer: Apple Business Manager with Managed Apple IDs deployed via MDM
Apple Business Manager lets organizations create Managed Apple IDs that the company owns. When deployed via MDM, employees can access the App Store and organization-distributed apps using the MAID instead of a personal Apple ID, keeping corporate and personal accounts fully separate.
Question 6: Where does macOS store iCloud Drive files locally on a user's Mac?
- /Library/CloudStorage/ — accessible to all local user accounts
- ~/Library/Mobile Documents/ — in the user's home directory, synced with iCloud (Correct answer)
- /private/var/icloud/ — a hidden system volume separate from the startup disk
- ~/Documents/iCloud/ — a visible folder the user must manually keep synced
Correct answer: ~/Library/Mobile Documents/ — in the user's home directory, synced with iCloud
iCloud Drive content is stored locally in ~/Library/Mobile Documents/ within the signed-in user's home folder and synchronized with Apple's iCloud servers. This location is per-user and not accessible to other accounts on the same Mac. Finder surfaces it as 'iCloud Drive' in the sidebar.
ACSP iCloud and Apple Accounts
What is the primary difference between a personal Apple ID and a Managed Apple ID (MAID)?