Apple-Device-Support Exam Dumps : Apple Device Support Exam (SUP-2024)

Legacy Contact is a new feature introduced by Apple in iOS 15.2, iPadOS 15.2, and macOS 12.1 that allows users to designate up to five people who can access their Apple account and data after they pass away. Legacy Contacts need to have the unique access key that the user created when they added them as a Legacy Contact, and a copy of the user’s death certificate, to request access to the user’s account. Legacy Contacts can access data stored in iCloud, such as photos and documents, but not services that require subscriptions, such as Apple Music or Apple TV+. The other options are not valid services offered by Apple. References: How to request access to a deceased family member’s Apple account, How to set up Apple account access so people can get in after you die

 FileVault is a feature that encrypts the entire APFS volume on a Mac using the AES-XTS data encryption algorithm. FileVault encryption keys are generated at different times depending on the scenario. According to the Apple Support documents12, FileVault encryption keys are generated in the following situations:

• During the first login by a user on the Mac: This happens when FileVault is turned on during the initial Setup Assistant process. The user’s password and the hardware UID are used to protect the class key, which wraps the volume encryption key. The user’s password is also used to generate a personal recovery key, which can be used to unlock the volume if the user forgets their password or their account is deleted.
• When a user turns on FileVault: This happens when FileVault is turned on later from the System Settings. The user’s password and the hardware UID are used to protect the class key, which wraps the volume encryption key. The user’s password is also used to generate a personal recovery key, which can be used to unlock the volume if the user forgets their password or their account is deleted. An anti-replay mechanism prevents the old key (based on hardware UID only) from being used to decrypt the volume.
• During user creation: This happens when a new user is added to the Mac after FileVault is turned on. The new user’s password and the hardware UID are used to protect the class key, which wraps the volume encryption key. The new user’s password is also used to generate a personal recovery key, which can be used to unlock the volume if the user forgets their password or their account is deleted.

The other options are not correct because FileVault encryption keys are not generated in those situations. When a user is deleted, their FileVault encryption key is removed from the Mac, but the volume encryption key remains the same. Setting the first user’s password does not generate FileVault encryption keys unless FileVault is turned on during the Setup Assistant process or later from the System Settings. References: Intro to FileVault - Apple Support, Volume encryption with FileVault in macOS - Apple Support

System Settings > Network > VPN & Filters > Add VPN Configuration