macOS Troubleshooting Guide for ACSP Candidates

Why Troubleshooting Is Central to the ACSP Exam

Troubleshooting is one of the most practical and heavily tested domains on the Apple Device Support exam. Unlike topics that require memorisation of specific settings or features, troubleshooting questions test your ability to think through problems systematically, select the right diagnostic tool, and identify the most likely cause of an issue.

The exam presents real-world scenarios: a Mac that will not start up, an application that crashes repeatedly, a system running unusually slowly, or a disk that is not mounting. Your job is to choose the correct troubleshooting approach from the available options. This guide covers the essential tools and techniques you need to master.

The Troubleshooting Methodology

Before diving into specific tools, understand Apple's general troubleshooting approach. The exam expects you to follow a logical methodology:

1. Gather information - Ask what happened, when it started, what changed recently, and whether the issue is reproducible
2. Verify the obvious - Check power, connections, and basic settings before pursuing complex diagnoses
3. Try quick fixes first - Restart the device, update the software, or reset a preference before more invasive steps
4. Isolate the problem - Determine whether the issue is related to hardware, software, a specific user account, or a specific application
5. Research and resolve - Use diagnostic tools, logs, and documentation to identify and fix the root cause
6. Verify the fix - Confirm the issue is resolved and has not introduced new problems

On the exam, questions often test whether you can identify the correct next step in this process. Choosing the most appropriate diagnostic action, rather than jumping to a solution, is a key skill.

Console

Console is macOS's log viewer application, found in /Applications/Utilities/. It provides real-time access to system logs, crash reports, and diagnostic messages generated by the operating system and applications.

What Console Shows

• System log messages from macOS services, daemons, and kernel
• Application log messages from running apps
• Crash reports generated when applications or system processes crash
• Diagnostic reports from system-level events

How to Use Console for the Exam

The exam may present a scenario where an application is crashing or a system process is failing, and ask you to identify the appropriate diagnostic tool. Console is the correct choice when you need to:

• View error messages generated during a crash or failure
• Identify which process or service is generating errors
• Check timestamps to correlate events with reported problems
• Review crash logs for specific applications

Key exam tip: Console shows you what happened (through log messages) but does not fix problems. It is a diagnostic tool, not a repair tool. If a question asks you to identify the cause of a problem, Console is often the right answer. If it asks you to fix a problem, you will need a different tool.

Unified Logging

Modern macOS uses the unified logging system, which consolidates logs from the kernel, system services, and applications into a single, searchable framework. You can also access logs from the command line using the log command:

• log show displays historical log entries
• log stream shows log entries in real time
• log show --predicate 'process == "Safari"' filters logs for a specific process

Activity Monitor

Activity Monitor is macOS's process management and system performance tool, found in /Applications/Utilities/. It provides real-time information about what processes are running and how they are consuming system resources.

The Five Tabs

Activity Monitor organises information across five tabs:

• CPU - Shows processor usage for each process and overall CPU load
• Memory - Displays memory usage, including physical memory, compressed memory, and swap usage
• Energy - Shows energy impact of each process (particularly relevant for laptops)
• Disk - Displays disk read/write activity per process
• Network - Shows network data sent and received per process

Common Exam Scenarios

Slow system performance: Activity Monitor is the correct first-step diagnostic tool when a Mac is running slowly. Look for processes consuming excessive CPU or memory. A process stuck at near 100% CPU usage often indicates an application that has become unresponsive.

High memory pressure: The Memory tab includes a Memory Pressure graph at the bottom. Green indicates sufficient memory, yellow indicates moderate pressure with compression active, and red indicates severe pressure with heavy swap usage. If memory pressure is consistently red, the system needs more RAM or has a memory-leaking application.

Identifying runaway processes: A "runaway" process is one consuming excessive CPU time without producing useful work. These can be identified in the CPU tab by sorting processes by CPU percentage. You can force-quit a runaway process by selecting it and clicking the X button in the Activity Monitor toolbar.

Determining if more RAM is needed: The Memory tab shows physical memory used, memory compression, cached files, and swap usage. If the system is heavily using swap (writing memory contents to disk) and memory pressure is in the red zone, additional RAM would improve performance.

Disk Utility

Disk Utility is macOS's disk management tool, found in /Applications/Utilities/. It handles disk formatting, partitioning, repair, and imaging.

Key Functions

• First Aid - Scans and repairs disk directory structure and file system errors
• Erase - Formats a disk or volume with a specified file system (APFS, Mac OS Extended, etc.)
• Partition - Creates or modifies disk partitions
• Mount/Unmount - Mounts or unmounts volumes without ejecting the physical disk
• RAID - Creates software RAID arrays (less commonly tested)

Exam-Relevant Knowledge

APFS (Apple File System): Modern Macs use APFS, which supports space sharing (multiple volumes sharing a single pool of storage), snapshots (point-in-time copies of the file system), encryption, and clones. The exam expects you to understand that APFS is the default file system for macOS and that it handles space sharing differently from traditional partitioning.

First Aid: Know when to run First Aid and what it can and cannot fix. First Aid can repair file system directory errors and minor disk corruption. It cannot repair hardware faults, recover deleted files, or fix severely damaged disks. If First Aid fails repeatedly, the disk may have a hardware problem.

Startup disk operations: Some Disk Utility operations, such as erasing the startup disk, require booting into macOS Recovery. This is important for exam scenarios involving disk reformatting or fresh macOS installation.

Apple Diagnostics

Apple Diagnostics (formerly Apple Hardware Test) is a built-in hardware testing tool that checks Mac hardware components for faults. It tests the logic board, memory, wireless components, and other hardware.

How to Run Apple Diagnostics

The method depends on the Mac model:

• Apple silicon Macs: Shut down the Mac, then press and hold the power button until "Loading startup options" appears. Press Command-D.
• Intel Macs: Shut down the Mac, then turn it on and immediately hold the D key until Apple Diagnostics starts.

What It Tests

Apple Diagnostics checks:

• Logic board
• Memory (RAM)
• Wireless components (Wi-Fi, Bluetooth)
• Battery and power system
• Storage controller
• Other sensors and subsystems

Reference Codes

After testing, Apple Diagnostics provides reference codes if issues are found. Common codes include:

• PPF codes - Fan-related issues
• PFM codes - System management controller issues
• VDH codes - Storage-related issues
• NDC/NDL codes - Camera issues
• NDD codes - USB-related issues

For the exam, you should understand that Apple Diagnostics is the correct tool when you suspect a hardware fault. If software troubleshooting steps have failed to resolve an issue (such as random shutdowns, graphical artifacts, or persistent kernel panics), Apple Diagnostics can determine whether the hardware is at fault.

Startup Modes and Key Combinations

Understanding macOS startup modes is essential for the exam. These are the key modes you should know:

Safe Mode

Safe Mode starts macOS with a minimal set of drivers and extensions, disables login items, and clears certain caches. Use Safe Mode to determine if a third-party kernel extension or login item is causing a problem.

• Apple silicon: Shut down, press and hold the power button until startup options appear, select the startup disk, then hold Shift and click "Continue in Safe Mode"
• Intel: Shut down, then turn on and hold the Shift key

macOS Recovery

macOS Recovery provides access to Disk Utility, macOS reinstallation, Terminal, and other utilities without loading the main macOS installation. Use Recovery when you need to repair or reinstall macOS, run Disk Utility on the startup disk, or reset passwords.

• Apple silicon: Shut down, press and hold the power button until "Loading startup options" appears, then select Options
• Intel: Shut down, then turn on and hold Command-R

Single User Mode / Recovery Terminal

On Intel Macs, Single User Mode (Command-S at startup) provides a command-line interface for advanced troubleshooting. On Apple silicon Macs, this is accessed through the Terminal in macOS Recovery.

NVRAM/PRAM Reset (Intel Only)

Resetting NVRAM clears stored settings including display resolution, startup disk selection, speaker volume, and time zone. This is performed by holding Command-Option-P-R during startup on Intel Macs. Apple silicon Macs reset NVRAM automatically during certain operations and do not require a manual reset.

SMC Reset (Intel Only)

The System Management Controller manages power, thermal, and battery functions on Intel Macs. Resetting the SMC can resolve issues with fans, power management, charging, and sleep. The reset procedure varies by Mac model. Apple silicon Macs do not have a traditional SMC and do not require this reset.

System Information

System Information (found in /Applications/Utilities/ or by holding Option and clicking the Apple menu > System Information) provides detailed hardware and software specifications for the Mac. It shows:

• Hardware configuration (processor, memory, storage, serial number)
• Software versions (macOS version, kernel version)
• Network configuration
• USB and Thunderbolt connected devices
• Installed extensions and applications

Use System Information when you need to verify hardware specifications, check installed software versions, or identify connected peripherals.

Putting It All Together

When facing a troubleshooting scenario on the exam, follow this decision framework:

1. Is it a hardware or software problem? If software troubleshooting fails, run Apple Diagnostics.
2. Is the Mac starting up? If not, try Safe Mode, Recovery, or NVRAM/SMC reset.
3. Is a process misbehaving? Use Activity Monitor to identify and manage it.
4. Is there an error message or crash? Check Console for log messages and crash reports.
5. Is there a disk problem? Run First Aid in Disk Utility.
6. Do you need to verify hardware specs? Use System Information.

Practise using each of these tools on a real Mac so that you understand not just what they do, but how they look and behave. The exam's scenario-based questions are much easier to answer when you have hands-on experience with the tools being discussed.