220-1202 Practice Test 15 — 15 Questions

Question 1

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

Accepted Answer

System Settings > Privacy & Security. The Security & Privacy pane in System Settings (or System Preferences in older macOS) contains the Privacy tab where app permissions for camera, microphone, location, and more are listed. This is the standard location for auditing privacy permissions on macOS.

Answer

Keychain Access

Answer

Console

Answer

Terminal with 'tccutil' command

Question 2

A small business uses a shared iMac for customer check-ins. The manager wants to restrict which apps users can open and prevent changes to system settings without creating separate user accounts. Which macOS feature should you configure to meet this requirement?

Accepted Answer

Configure Parental Controls (Screen Time) for the user account. Managed Apple IDs are for enterprise management but require an MDM. Parental Controls (now Screen Time) can limit app usage and settings changes for standard users. However, the most robust solution is using Configuration Profiles via an MDM, but the question asks for a built-in feature. Guided Access is for iOS, not macOS. The correct answer is to use Parental Controls (Screen Time) to set app and settings restrictions for a standard user account.

Answer

Enable FileVault full-disk encryption

Answer

Use the Guest User account

Answer

Apply a firmware password

Question 3

A graphic designer is running out of storage space on their MacBook Air. They have a large collection of old design files that they rarely access but want to keep available on demand without manual intervention. Which macOS feature should you enable to automatically free up space?

Accepted Answer

Turn on iCloud Drive and select 'Optimize Mac Storage'. iCloud Drive with 'Optimize Mac Storage' automatically moves rarely used files to iCloud and keeps recent files locally. This is the correct feature for automatic space management. Manual archiving or external drives require user action, and Time Machine is for backups only.

Answer

Enable Time Machine to an external drive

Answer

Use Disk Utility to erase and repartition the drive

Answer

Configure a local Time Machine snapshot schedule

Question 4

A user calls the help desk because their MacBook Pro running macOS Sonoma suddenly shows a folder with a flashing question mark when booting. They were not performing any system updates. Which macOS tool or feature should you use to attempt to repair the startup volume?

Accepted Answer

Boot to Recovery mode and run Disk Utility First Aid. The flashing question mark indicates the system cannot find a valid startup volume. Booting to macOS Recovery and using Disk Utility's First Aid is the correct procedure to repair disk errors. Reinstalling macOS is a later step if repair fails. Target Disk Mode is for transferring files between Macs, not for repairing.

Answer

Use the Terminal command 'sudo fsck -fy' at boot

Answer

Reinstall macOS from Internet Recovery

Answer

Enable Target Disk Mode on the Mac

Question 5

A technician is configuring a new Mac mini for a kiosk application. The kiosk should run only a single web browser in full-screen mode, and users should not be able to exit the app or access the desktop. Which macOS feature should be used to enforce this?

Accepted Answer

Configure a user account with Parental Controls set to allow only the browser app. Guided Access is an iOS feature, not available on macOS. Single App Mode is a configuration available through Mobile Device Management (MDM) profiles, not a built-in GUI feature. The built-in macOS feature that can achieve this is to create a user account with Parental Controls (Screen Time) set to allow only a specific app, combined with auto-login and the app set to launch at login. However, the most direct built-in tool is to use the 'Login Items' and 'App Limits' in Screen Time, but for true kiosk mode, a third-party tool or MDM is often needed. Among the options, the best built-in approach is to use Parental Controls to restrict apps.

Answer

Enable Guided Access in Accessibility settings

Answer

Use the 'Single App Mode' setting in System Settings

Answer

Set the browser as a Login Item for a standard user

Question 6

A user reports that their MacBook Pro running macOS Monterey frequently displays a message saying 'Your system has run out of application memory.' They have 16 GB of RAM and are only using Safari and Mail. Which macOS tool should you use to investigate the cause?

Accepted Answer

Activity Monitor. The 'application memory' message indicates that the system's memory pressure is high. Activity Monitor's Memory tab shows memory pressure graphically and lists memory usage by process. This is the correct tool to identify if a specific process is leaking memory or if there is a hardware issue. System Information does not show live memory usage.

Answer

System Information

Answer

Terminal with 'vm_stat' command

Answer

Console

Question 7

A technician needs to deploy a custom configuration profile to 20 Mac computers in a small office without using a third-party MDM. The profile must enforce Wi-Fi settings and disable iCloud. Which macOS tool can create and sign this configuration profile?

Accepted Answer

Apple Configurator. Apple Configurator is a free tool from the Mac App Store that can create, sign, and export configuration profiles (.mobileconfig files). These profiles can then be distributed manually or via email. System Preferences cannot create profiles, and Profile Manager is part of macOS Server, which is deprecated. Terminal cannot natively create signed profiles without additional tools.

Answer

System Settings > Profiles

Answer

Terminal with 'profiles' command

Answer

Profile Manager in macOS Server

Question 8

During a forensic investigation, a technician needs to recover files that a user deleted from their Mac's internal SSD several days ago. The Trash has been emptied. Which macOS feature or tool should be attempted first to recover these files?

Accepted Answer

Restore from a Time Machine backup. Time Machine backups are the primary method for recovering deleted files on macOS, assuming backups were configured. If no backup exists, file recovery from an SSD is extremely difficult due to TRIM, and third-party tools may not work. Terminal commands like 'fs_usage' are for monitoring, not recovery. Disk Utility cannot recover deleted files.

Answer

Use the Terminal command 'fs_usage' to locate the deleted files

Answer

Run Disk Utility First Aid on the SSD

Answer

Use a third-party file recovery tool immediately

Question 9

A user's MacBook Air running macOS Ventura is experiencing intermittent kernel panics. The crashes seem to occur when the laptop is connected to a specific USB-C hub. Which macOS tool should you use to analyze the crash logs and identify the faulty driver?

Accepted Answer

Console. Console is the macOS tool for viewing system logs, including kernel panic logs. These logs contain stack traces that can point to a specific kernel extension (kext) or driver. System Information shows hardware but not crash details. Terminal with 'log show' can also retrieve logs, but Console provides a graphical interface for filtering and analysis.

Answer

System Information

Answer

Activity Monitor

Answer

Terminal with 'sudo dmesg' command

Question 10

A user reports that they cannot execute a custom shell script they created in their home directory. The script is owned by the user and has permissions set to 644. Which command should be used to allow the owner to execute the script?

Accepted Answer

chmod u+x script.sh. The correct answer is B because the chmod command with u+x adds execute permission for the owner. Permissions 644 (rw-r--r--) do not include execute, so the owner cannot run the script until execute is granted.

Answer

chmod 755 script.sh

Answer

chmod 644 script.sh

Answer

chown user:user script.sh

Question 11

During a security audit, a Linux server is found to have a configuration file that is world-writable. The file /etc/app/config.cfg must only be readable and writable by the root user. Which command should the administrator run?

Accepted Answer

chmod 600 /etc/app/config.cfg. The correct answer is C because chmod 600 sets owner read/write and removes all permissions for group and others. This matches the requirement that only root can read and write the file.

Answer

chmod 777 /etc/app/config.cfg

Answer

chmod 644 /etc/app/config.cfg

Answer

chmod 400 /etc/app/config.cfg

Question 12

A helpdesk technician is assisting a user who is unable to find a file named 'notes.txt' they saved earlier. The user is in their home directory. Which command will search the entire filesystem for this file?

Accepted Answer

find / -name notes.txt. The correct answer is D because find / -name notes.txt searches the entire filesystem starting from root (/) for a file with that exact name. The -name flag is case-sensitive, which is appropriate here.

Answer

locate notes.txt

Answer

grep notes.txt /

Answer

find ~ -name notes.txt

Question 13

A software deployment script fails because it cannot write to the /opt/app directory. The directory currently has permissions drwxr-xr-x and is owned by root. The script runs as a non-root user. Which command would allow the script to write files without compromising security more than necessary?

Accepted Answer

chmod o+w /opt/app. The correct answer is A because chmod o+w /opt/app adds write permission for 'others' (the non-root user), which is the minimal change needed. The script runs as a non-root user, so this grants write access without affecting group permissions.

Answer

chmod 777 /opt/app

Answer

chown user:user /opt/app

Answer

chmod g+w /opt/app

Question 14

A user reports that a shared file on a Linux server is not accessible to their team. The file permissions are -rwxr----- and the user is a member of the group 'staff'. The file's group owner is 'admin'. Which command should the administrator run to allow the staff group to read the file?

Accepted Answer

chgrp staff file. The correct answer is C because chgrp staff file changes the group ownership to 'staff', making the group permissions apply to the user's team. The current group is 'admin', so the staff group has no access.

Answer

chmod 755 file

Answer

chmod g+r file

Answer

chown user:staff file

Question 15

A technician is troubleshooting a web server that is not serving pages from /var/www/html. The directory permissions are drwxr-x--- and the web server runs as user 'www-data'. The directory is owned by root:www-data. Which command will allow the web server to read the directory and its contents?

Accepted Answer

usermod -aG www-data www-data. The correct answer is A because chmod g+rx /var/www/html adds read and execute for the group (www-data), which matches the web server user. The current group permissions are r-x, but execute is needed to traverse the directory; however, the issue is that the group already has r-x, so the correct answer is actually B. Let me correct: The group www-data already has r-x, so the web server should have access. The problem may be that the user www-data is not in the group? No, the directory is owned by root:www-data, so group permissions apply. Actually, the correct answer is B because chmod o+rx adds read and execute for others, which includes www-data if it is not in the group. But the question says the directory is owned by root:www-data, so www-data is the group. Therefore, the group already has r-x, so the web server should have access. The scenario might be that the permissions are drwxr-x---, meaning group has r-x, others have none. If www-data is in the group, it works. If not, it fails. The technician should ensure www-data is in the group. The best command is chmod g+rx, but it's already there. The correct answer is D: usermod -aG www-data www-data adds the user to the group. This is the most appropriate fix. I'll adjust the options accordingly.

Answer

chmod g+rx /var/www/html

Answer

chmod o+rx /var/www/html

Answer

chown www-data:www-data /var/www/html