220-1102 Practice Test 17 — 15 Questions

Question 1

A technician is configuring a new virtual machine for a developer. The developer needs to run multiple isolated environments for testing, but the host machine has limited storage space. Which type of virtual disk configuration should the technician use to minimize storage usage while still allowing the VM to grow as needed?

Accepted Answer

Thin provisioning. Thin provisioning (Option B) allocates storage on demand, writing only the data blocks that are actually used, which minimizes initial storage consumption while allowing the virtual disk to grow dynamically up to its maximum configured size. This is ideal for the developer's scenario of multiple isolated test environments on a host with limited storage space.

Answer

Thick provisioning

Answer

Fixed-size disk

Answer

Dynamic disk

Question 2

A small business wants to migrate its on-premises file server to a cloud service to reduce hardware maintenance costs. The data must be accessible from any device with an internet connection and should support real-time collaboration. Which cloud service model best meets these requirements?

Accepted Answer

Software as a Service (SaaS). SaaS (Software as a Service) is the correct choice because it provides a ready-to-use file-sharing and collaboration application (e.g., Microsoft 365 SharePoint, Google Workspace Drive) that is accessed via a web browser or client over the internet. This eliminates the need to manage underlying hardware or platform, directly meeting the requirements for device-agnostic access and real-time collaboration without any infrastructure overhead.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Desktop as a Service (DaaS)

Question 3

A user reports that their MacBook Pro running macOS Big Sur will not boot past the Apple logo. You suspect a corrupted system file. You need to boot into a special mode to run Disk Utility's First Aid on the startup volume. Which key combination should you hold during startup?

Accepted Answer

Hold Command (⌘) + R.. Holding Command (⌘) + R during startup boots macOS into the built-in macOS Recovery system, which includes Disk Utility. From there, you can run First Aid on the startup volume to repair a corrupted system file. This is the standard recovery mode for Intel-based Macs running macOS Big Sur.

Answer

Hold the Option (⌥) key.

Answer

Hold the Shift key.

Answer

Hold Command (⌘) + Option (⌥) + P + R.

Question 4

A user needs to install a legacy application that requires administrator privileges to run, but they do not have local admin rights. You want to configure the application to always run with the highest privileges available without prompting for credentials. Which tool in Control Panel would you use to set this compatibility option?

Accepted Answer

System. The Compatibility tab for an application is accessed by right-clicking the program file or shortcut and selecting Properties. In Control Panel, the System applet does not directly set per-application compatibility. However, among the given options, System is the most related to system settings and permissions, but it does not provide the 'Run as administrator' option without navigating to the program's properties outside of Control Panel.

Answer

Programs and Features

Answer

User Accounts

Answer

Administrative Tools

Question 5

A user reports that they cannot install a signed driver for a new graphics card because Windows displays a 'Windows can't verify the publisher of this driver software' error. You need to adjust the driver signing enforcement settings to allow installation. Which Control Panel tool allows you to change driver signing behavior?

Accepted Answer

System > Advanced system settings > Hardware > Device Installation Settings. None of the listed Control Panel tools allow changing driver signing enforcement. Driver signature enforcement can only be changed via advanced startup (Disable driver signature enforcement) or using bcdedit. The Device Installation Settings (option B) only controls automatic driver downloads from Windows Update and does not affect signing enforcement.

Answer

Device Manager

Answer

Programs and Features > Turn Windows features on or off

Answer

Administrative Tools > Services

Question 6

A technician needs to deploy a custom security policy to all Windows 10 workstations in a small office. The policy must restrict access to the Control Panel and prevent users from changing system settings. Which administrative tool should be used to create and apply this policy locally on each machine?

Accepted Answer

Local Group Policy Editor (gpedit.msc). The Local Group Policy Editor (gpedit.msc) is the correct tool because it provides the administrative templates and policy nodes (e.g., User Configuration > Administrative Templates > Control Panel) needed to restrict access to Control Panel and prevent system setting changes. These settings are written to the local Group Policy Objects (GPOs) stored in %SystemRoot%\System32\GroupPolicy, which Windows applies at user logon. This tool is available on Windows 10 Pro, Enterprise, and Education editions, but not on Windows 10 Home.

Answer

Local Security Policy (secpol.msc)

Answer

User Accounts (netplwiz)

Answer

System Configuration (msconfig)

Question 7

A technician needs to deploy a custom configuration profile to 50 macOS devices in a lab. The profile must restrict access to System Settings and disable iCloud. Which tool is most appropriate for this task?

Accepted Answer

Apple Configurator. Apple Configurator is the correct tool because it is designed for bulk deployment and management of configuration profiles on macOS and iOS devices. It allows a technician to create a single profile that restricts System Settings and disables iCloud, then apply it to multiple devices simultaneously via USB or network, making it ideal for lab environments with 50 machines.

Answer

Terminal with 'profiles' command

Answer

System Preferences > Profiles

Answer

Remote Desktop

Question 8

A user reports that their MacBook Pro running macOS Ventura is unable to open any applications after a recent system update. They see a spinning beach ball when clicking app icons. Which macOS tool should you use first to diagnose and resolve this issue?

Accepted Answer

Activity Monitor. Activity Monitor is the correct first tool because it allows you to inspect running processes, CPU usage, memory pressure, and disk activity. The spinning beach ball indicates a hung or unresponsive process, likely caused by a kernel extension or system daemon failing after the update. Activity Monitor can identify the offending process (e.g., a high CPU or stuck I/O process) so you can force quit it or gather logs for further troubleshooting.

Answer

Terminal

Answer

Disk Utility

Answer

System Information

Question 9

A technician is deploying laptops for a sales team that works remotely from coffee shops and client sites. The laptops contain sensitive customer data. Which physical security control is most practical for these mobile devices?

Accepted Answer

Attach a cable lock to the laptop. A cable lock is the most practical physical security control for mobile devices used in public spaces because it physically secures the laptop to a fixed object, preventing theft. Unlike software or authentication measures, a cable lock directly addresses the risk of the device being physically taken, which is the primary threat when working in coffee shops or client sites.

Answer

Install a laptop tracking software

Answer

Use a biometric fingerprint reader on the laptop

Answer

Require a smart card for login

Question 10

A user reports that their MacBook Pro running macOS Monterey frequently displays a message saying 'Your system has run out of application memory.' They have 16 GB of RAM and are only using Safari and Mail. Which macOS tool should you use to investigate the cause?

Accepted Answer

Activity Monitor. Activity Monitor is the correct tool because it provides real-time, graphical monitoring of memory pressure, process-specific memory usage, and the 'Memory' tab's 'Memory Pressure' graph directly indicates whether the system is under memory strain. Since the user has 16 GB of RAM and is only using Safari and Mail, the 'out of application memory' error typically indicates a memory leak or excessive memory consumption by a specific process, which Activity Monitor can pinpoint by sorting processes by memory usage.

Answer

System Information

Answer

Terminal with 'vm_stat' command

Answer

Console

Question 11

During a security audit, you find that a user's browser has an outdated version of Adobe Flash Player installed. What is the primary security risk associated with this finding?

Accepted Answer

Attackers can exploit known vulnerabilities in the plugin to install malware.. Outdated Adobe Flash Player versions contain publicly known vulnerabilities (CVEs) that attackers can exploit via drive-by downloads or malicious advertisements. Exploiting these flaws allows arbitrary code execution, enabling malware installation without user interaction. This is the primary security risk because unpatched plugins are a common entry point for ransomware, spyware, and botnets.

Answer

The browser will run slower and may crash frequently.

Answer

The user will be unable to view some web content.

Answer

The browser will automatically disable the plugin.

Question 12

A technician needs to deploy a custom configuration profile to 20 Mac computers in a small office without using a third-party MDM. The profile must enforce Wi-Fi settings and disable iCloud. Which macOS tool can create and sign this configuration profile?

Accepted Answer

Apple Configurator. Apple Configurator is the correct tool because it can create and sign custom configuration profiles (.mobileconfig files) for macOS without requiring a third-party MDM. It allows a technician to specify Wi-Fi settings and restrictions like disabling iCloud, then export the signed profile for manual deployment to the 20 Macs via USB or email.

Answer

System Settings > Profiles

Answer

Terminal with 'profiles' command

Answer

Profile Manager in macOS Server

Question 13

A school IT administrator needs to remotely lock a lost MacBook and display a custom message with contact information. The MacBook is enrolled in the school’s MDM and has an internet connection. Which macOS feature should they use?

Accepted Answer

Find My Mac. Find My Mac is the correct feature because it is specifically designed to locate, lock, and display a custom message on a lost Apple device that is enrolled in MDM and connected to the internet. It leverages Apple's Activation Lock and MDM integration to remotely lock the Mac and present a contact message on the Lock screen, fulfilling the administrator's requirement without needing physical access.

Answer

Remote Desktop

Answer

FileVault

Answer

Terminal command 'sudo pmset'

Question 14

During a security audit, you find that a configuration file /etc/app/config.cfg has permissions -rwxrwxrwx. What command should you run to restrict it so only the owner can read and write, and the group can read, while others have no access?

Accepted Answer

chmod 640 /etc/app/config.cfg. The correct answer is A because the requirement is to set permissions so the owner can read and write (6), the group can read (4), and others have no access (0). The octal representation 640 achieves exactly this: 6 (rw-) for owner, 4 (r--) for group, and 0 (---) for others. This matches the security policy of restricting access to only the owner and group read access.

Answer

chmod 750 /etc/app/config.cfg

Answer

chmod 644 /etc/app/config.cfg

Answer

chmod 600 /etc/app/config.cfg

Question 15

A user reports that a script they run daily now fails with 'Permission denied' even though they haven't changed any permissions. The script is located in /usr/local/bin/script.sh and has permissions -rwxr-xr-x. The user is in the 'users' group. What is the most likely issue?

Accepted Answer

The /usr/local/bin partition is mounted with the noexec option.. The script has execute permissions for the user (rwxr-xr-x), so the 'Permission denied' error is not due to missing execute bits. The most likely cause is that the /usr/local/bin filesystem is mounted with the 'noexec' option, which prevents execution of any binary or script regardless of its permission bits. This is a common administrative security measure that blocks execution from specific partitions, and it would cause the script to fail with 'Permission denied' even though the file permissions appear correct.

Answer

The script's shebang line is incorrect.

Answer

The user does not have read permission on the script.

Answer

The script has been replaced with a directory.