Which local database can you read to get a list of kexts on a macOS?

The correct choice is the local database located at /var/db/SystemPolicyConfiguration/KextPolicy. This database is specifically designed to store information related to kernel extensions (kexts) and their loading policies on macOS. By reading this file, you can gain insight into which kexts are allowed or restricted according to the system's security policies. It serves as a critical reference for understanding the system's configuration regarding third-party kexts and ensuring compliance with security measures, particularly in later versions of macOS where System Integrity Protection (SIP) plays a significant role in kext management.

The other options do not serve the purpose of listing kexts in the way needed. The /System/Library/Extensions directory contains the bundled kernel extensions themselves, but it does not provide information about their loading policies or the status of these extensions. The /Library/Preferences directory is intended for user preferences and application settings, not kexts. Finally, while /var/db/kexts.db may reference kernel extensions in some contexts, it is not the primary source for kext policy information and might not contain the latest data concerning kext loading security policies. Thus, the most appropriate and specific source of information regarding kexts and their handling by