220-1102 Practice Test 9 — 10 Questions

Question 1

A security incident has occurred: a user's Mac running macOS Ventura was infected with malware that modified system files. The technician needs to boot the Mac into a mode that loads only essential Apple-signed kernel extensions and prevents third-party software from loading, in order to safely remove the malware. Which startup mode should they use?

Accepted Answer

Safe Mode (Shift key during startup).. Safe Mode (Shift key during startup) is correct because it forces macOS to load only essential kernel extensions that are signed by Apple, disables all third-party startup items and login items, and runs a directory integrity check. This minimal environment prevents the malware from loading its own kernel extensions or other malicious code, allowing the technician to safely remove the infected files without interference.

Answer

Single-user mode (Command + S).

Answer

Verbose mode (Command + V).

Answer

Target Disk Mode (T key).

Question 2

A user on a Mac running macOS Big Sur needs to share a folder on their local network with a Windows colleague. The user wants the folder to appear as a network drive on the Windows machine without installing additional software. Which macOS feature should they enable and configure?

Accepted Answer

File Sharing in System Settings > Sharing, and ensure SMB is enabled.. Option B is correct because File Sharing in macOS Big Sur includes the ability to enable SMB (Server Message Block) sharing, which is the native file-sharing protocol used by Windows. By turning on File Sharing and checking the SMB option, the Mac acts as an SMB server, allowing the Windows colleague to map the shared folder as a network drive without any additional software.

Answer

Screen Sharing in System Settings > Sharing.

Answer

Internet Sharing in System Settings > Sharing.

Answer

Remote Login in System Settings > Sharing.

Question 3

A user calls the help desk saying that after upgrading to macOS Ventura, the 'Documents' folder in the sidebar keeps disappearing after every reboot. They need it to stay visible. Which macOS feature or tool should you use to fix this?

Accepted Answer

Finder > Preferences > Sidebar. Option B is correct because the visibility of folders like 'Documents' in the Finder sidebar is controlled directly through Finder's own preferences, not through global system settings. By opening Finder > Preferences > Sidebar, you can check the 'Documents' checkbox, which persists the folder's visibility across reboots. This setting is stored per-user in the Finder plist and is not affected by macOS upgrades.

Answer

System Settings > Desktop & Dock

Answer

Terminal command 'defaults write com.apple.finder ShowSidebar -bool true'

Answer

Spotlight Preferences

Question 4

A small business owner wants to restrict app installations on company Macs to only the Mac App Store to prevent employees from downloading unapproved software. Which macOS security feature should you configure?

Accepted Answer

Gatekeeper. Gatekeeper controls where apps can be installed from. Setting it to 'App Store' restricts installations to only Mac App Store apps, meeting the business requirement.

Answer

FileVault

Answer

System Integrity Protection (SIP)

Answer

Parental Controls

Question 5

During a security incident, a technician needs to verify whether a specific application was granted camera and microphone permissions on a macOS computer. Which macOS tool should they use to check these privacy settings?

Accepted Answer

System Settings > Privacy & Security. System Settings > Privacy & Security is the correct tool because macOS centralizes all privacy-related permissions—including camera and microphone access—in this GUI panel. The technician can navigate to the specific application under the Camera and Microphone sub-sections to verify granted permissions. This is the standard, user-facing interface for managing privacy controls on macOS.

Answer

Keychain Access

Answer

Console

Answer

Terminal with 'tccutil' command

Question 6

A small business uses a shared iMac for customer check-ins. The manager wants to restrict which apps users can open and prevent changes to system settings without creating separate user accounts. Which macOS feature should you configure to meet this requirement?

Accepted Answer

Configure Parental Controls (Screen Time) for the user account. Parental Controls (Screen Time) allows administrators to restrict app usage and system settings changes on a per-user basis without creating separate user accounts. This feature can limit which applications a user can open and prevent modifications to system preferences, meeting the manager's requirement directly.

Answer

Enable FileVault full-disk encryption

Answer

Use the Guest User account

Answer

Apply a firmware password

Question 7

During a security audit, a Linux server is found to have a configuration file that is world-writable. The file /etc/app/config.cfg must only be readable and writable by the root user. Which command should the administrator run?

Accepted Answer

chmod 600 /etc/app/config.cfg. Option C is correct because `chmod 600` sets the file permissions to read and write for the owner (root) and no permissions for group or others. This satisfies the requirement that only root can read and write `/etc/app/config.cfg`, as root is the owner of the file.

Answer

chmod 777 /etc/app/config.cfg

Answer

chmod 644 /etc/app/config.cfg

Answer

chmod 400 /etc/app/config.cfg

Question 8

A software deployment script fails because it cannot write to the /opt/app directory. The directory currently has permissions drwxr-xr-x and is owned by root. The script runs as a non-root user. Which command would allow the script to write files without compromising security more than necessary?

Accepted Answer

chmod o+w /opt/app. The correct answer is A because chmod o+w /opt/app adds write permission for 'others' (the non-root user), which is the minimal change needed. The script runs as a non-root user, so this grants write access without affecting group permissions.

Answer

chmod 777 /opt/app

Answer

chown user:user /opt/app

Answer

chmod g+w /opt/app

Question 9

A user reports that a shared file on a Linux server is not accessible to their team. The file permissions are -rwxr----- and the user is a member of the group 'staff'. The file's group owner is 'admin'. Which command should the administrator run to allow the staff group to read the file?

Accepted Answer

chgrp staff file. The file's current permissions (-rwxr-----) grant the owner full access and the group 'admin' read-only access, but the user is in the 'staff' group, not 'admin'. To allow the 'staff' group to read the file, the file's group owner must be changed to 'staff' using `chgrp staff file`. This ensures that the group read permission (r--) applies to members of the 'staff' group.

Answer

chmod 755 file

Answer

chmod g+r file

Answer

chown user:staff file

Question 10

A malicious script is suspected to have changed permissions on critical system files. The administrator needs to restore the /etc/passwd file to its default permissions, which are 644. The file is currently 777. Which command will set the correct permissions?

Accepted Answer

chmod 644 /etc/passwd. The correct answer is A because chmod 644 /etc/passwd sets the permissions to rw-r--r--, which is the standard for /etc/passwd. This removes the world-writable and executable bits.

Answer

chmod 600 /etc/passwd

Answer

chmod 755 /etc/passwd

Answer

chmod 444 /etc/passwd