220-1102 macOS Features and Tools — 20 Questions

Question 1

A security incident has occurred: a user's Mac running macOS Ventura was infected with malware that modified system files. The technician needs to boot the Mac into a mode that loads only essential Apple-signed kernel extensions and prevents third-party software from loading, in order to safely remove the malware. Which startup mode should they use?

Accepted Answer

Safe Mode (Shift key during startup).. Safe Mode (holding Shift during startup) loads only essential kernel extensions and disables all third-party startup items and login items. It also performs a directory check of the startup volume. This environment is ideal for troubleshooting and removing malware without interference. Single-user mode (Command+S) boots to a command-line interface but is deprecated on Apple Silicon Macs and does not inherently prevent malware from loading.

Answer

Single-user mode (Command + S).

Answer

Verbose mode (Command + V).

Answer

Target Disk Mode (T key).

Question 2

A user reports that their MacBook Pro running macOS Big Sur will not boot past the Apple logo. You suspect a corrupted system file. You need to boot into a special mode to run Disk Utility's First Aid on the startup volume. Which key combination should you hold during startup?

Accepted Answer

Hold Command (⌘) + R.. Holding Command (⌘) and R during startup boots the Mac into macOS Recovery, which provides access to Disk Utility, Terminal, and the ability to reinstall macOS. From there, you can run First Aid on the startup disk. Option (⌥) boots into Startup Manager, and Shift boots into Safe Mode.

Answer

Hold the Option (⌥) key.

Answer

Hold the Shift key.

Answer

Hold Command (⌘) + Option (⌥) + P + R.

Question 3

A user complains that their MacBook Air running macOS Monterey frequently runs out of memory and slows down when they have multiple browser tabs and apps open. They want to see which processes are consuming the most memory without installing third-party software. Which macOS tool should you instruct them to use?

Accepted Answer

Activity Monitor from the Utilities folder.. Activity Monitor is the built-in macOS utility that displays real-time system resource usage, including memory, CPU, energy, disk, and network. The Memory tab shows memory pressure and per-process memory consumption, helping identify memory hogs. Force Quit is only for terminating applications, not for monitoring.

Answer

Force Quit Applications window (Cmd+Option+Esc).

Answer

System Preferences > Memory.

Answer

Terminal with the 'top' command.

Question 4

A technician is troubleshooting a Mac that fails to connect to a Wi-Fi network. The network is visible, but entering the correct password results in an 'unable to join the network' error. The technician wants to delete the saved network configuration to start fresh. Which macOS tool or location should they use?

Accepted Answer

System Settings > Network > Wi-Fi > Details > Remove this network.. The Network pane in System Settings allows you to manage network interfaces, including Wi-Fi. By selecting the Wi-Fi interface and clicking 'Advanced' or 'Details', you can see a list of preferred networks and remove the problematic one. This clears the saved password and settings. Keychain Access stores passwords but not network configurations, and Terminal is not the standard method.

Answer

Keychain Access and delete the Wi-Fi password entry.

Answer

Terminal with the 'networksetup -setairportnetwork' command.

Answer

System Information > Network > Wi-Fi.

Question 5

A graphic designer needs to create a bootable macOS installer on an external SSD to deploy macOS Sonoma to multiple iMacs in the office. They have the 'Install macOS Sonoma.app' file. Which built-in macOS tool should they use to create the bootable drive?

Accepted Answer

Terminal with the 'createinstallmedia' command.. The 'createinstallmedia' command in Terminal is the official Apple tool for creating a bootable macOS installer from an application bundle. It writes the installer to the target volume and makes it bootable. Disk Utility can erase the drive but cannot create the installer media, and System Information does not have this capability.

Answer

Disk Utility to restore the .app file to the SSD.

Answer

System Information to verify the SSD is bootable.

Answer

Migration Assistant to copy the app to the SSD.

Question 6

A user has accidentally deleted several important files from their Documents folder on their Mac running macOS Ventura. They need to recover them immediately. Which built-in macOS tool should you guide them to use first?

Accepted Answer

The Trash folder in the Dock.. The Trash folder on macOS stores deleted files until it is emptied. If the user has not emptied the Trash, they can simply open the Trash icon in the Dock, locate the files, and drag them back to the Documents folder. Time Machine requires a backup to exist, and Terminal commands are unnecessary here.

Answer

Time Machine from the menu bar.

Answer

Terminal with the 'cd' and 'ls' commands.

Answer

System Settings > General > Storage.

Question 7

A small business owner wants to ensure that only authorized users can access their iMac. They need to set up separate accounts for three employees, each with a username and password, and restrict one employee from installing software. Which macOS feature should they use to create and manage these user accounts?

Accepted Answer

System Settings > Users & Groups.. System Settings (formerly System Preferences) contains the Users & Groups pane, which is the central location for creating, deleting, and managing user accounts on macOS. It allows setting account types (Administrator, Standard, Managed with Parental Controls) to control permissions and software installation. Terminal commands exist but are not the recommended primary tool for this task.

Answer

Terminal with the 'dscl' command.

Answer

System Information > Software > Installations.

Answer

Keychain Access to create user passwords.

Question 8

A user reports that their MacBook Air running macOS Monterey is running slowly and they suspect a startup item is consuming resources. They want to see which applications launch automatically at login and disable unnecessary ones. Which macOS tool should they use?

Accepted Answer

System Settings > General > Login Items.. System Settings > General > Login Items (or System Preferences > Users & Groups > Login Items on older macOS) lists all applications and services that start automatically when the user logs in. From there, the user can select an item and click the minus button to disable it. Activity Monitor shows running processes but does not manage startup items.

Answer

Activity Monitor and sort by CPU usage.

Answer

Terminal with the 'launchctl list' command.

Answer

Force Quit Applications window.

Question 9

A user on a Mac running macOS Big Sur needs to share a folder on their local network with a Windows colleague. The user wants the folder to appear as a network drive on the Windows machine without installing additional software. Which macOS feature should they enable and configure?

Accepted Answer

File Sharing in System Settings > Sharing, and ensure SMB is enabled.. File Sharing in System Settings uses SMB (Server Message Block) protocol, which is natively supported by Windows. By enabling File Sharing and adding the folder to the Shared Folders list, the Mac acts as an SMB server. The Windows user can then connect to it using the Mac's IP address or hostname. Screen Sharing is for remote desktop, not file sharing.

Answer

Screen Sharing in System Settings > Sharing.

Answer

Internet Sharing in System Settings > Sharing.

Answer

Remote Login in System Settings > Sharing.

Question 10

A user reports that their MacBook Pro running macOS Ventura suddenly lost all desktop icons and the menu bar is missing. They can still move the cursor and click on open applications. Which macOS feature or tool should you use to restore the desktop and menu bar?

Accepted Answer

Use Force Quit (Cmd+Option+Esc) and select Finder, then click Relaunch.. The scenario describes a Finder crash, which often causes the desktop, menu bar, and icons to disappear. Relaunching Finder via the Force Quit Applications window restores these elements without rebooting the entire system. This is a common troubleshooting step for macOS GUI issues.

Answer

Restart the MacBook by holding the power button.

Answer

Open Activity Monitor and force quit the WindowServer process.

Answer

Run the command 'sudo killall Dock' in Terminal.

Question 11

A user calls the help desk saying that after upgrading to macOS Ventura, the 'Documents' folder in the sidebar keeps disappearing after every reboot. They need it to stay visible. Which macOS feature or tool should you use to fix this?

Accepted Answer

Finder > Preferences > Sidebar. The correct answer is Finder Preferences because sidebar visibility of folders is controlled there, not in System Settings or via Spotlight. This question tests knowledge of basic macOS UI customization, a common support task.

Answer

System Settings > Desktop & Dock

Answer

Terminal command 'defaults write com.apple.finder ShowSidebar -bool true'

Answer

Spotlight Preferences

Question 12

A user reports that their Mac running macOS Ventura frequently asks for the admin password when trying to change network settings, even though they are the only user. They want this to stop. What is the most secure way to address this?

Accepted Answer

Change the user account type from Standard to Administrator in Users & Groups. Changing network settings requires admin privileges by default for security. The correct approach is to grant the user admin rights, which eliminates the prompt but also gives full system access. Other options either don't work or compromise security.

Answer

Disable System Integrity Protection (SIP)

Answer

Use the 'security authorizationdb' command to remove the requirement

Answer

Turn off FileVault

Question 13

A graphic designer reports that their MacBook Pro running macOS Monterey suddenly shows a gray screen with a folder icon containing a question mark at startup. They have important client files on the internal SSD. What is the most likely cause of this issue?

Accepted Answer

macOS cannot locate a valid boot volume or system folder. The folder with a question mark indicates the system cannot find a valid boot volume. This is often due to a corrupted boot loader or disconnected internal drive, not a failed backup or simple login issue.

Answer

The user’s Time Machine backup has failed

Answer

The firmware password is enabled

Answer

The user’s login keychain is corrupted

Question 14

A user complains that their Mac running macOS Big Sur suddenly shows a message 'Your system has run out of application memory' and applications crash frequently. Activity Monitor shows high memory pressure. What is the most effective built-in tool to diagnose the cause?

Accepted Answer

Activity Monitor. Activity Monitor is the primary tool for viewing memory usage, identifying memory-hungry processes, and checking memory pressure. It helps pinpoint which app is leaking or consuming excessive RAM.

Answer

Console

Answer

Disk Utility

Answer

System Information

Question 15

A user reports that their MacBook Air running macOS Monterey will not connect to a Wi-Fi network that other devices can connect to. The Wi-Fi menu shows the network but clicking it does nothing. Which macOS tool should you use to reset the Wi-Fi configuration?

Accepted Answer

Wireless Diagnostics. The 'Wireless Diagnostics' tool includes a 'Monitor' mode and a 'Log' feature, but more importantly, it provides a 'Scan' and 'Info' view. However, to reset Wi-Fi configuration, you often need to remove plist files or use the 'Assist me' option in Network settings. The correct answer is Wireless Diagnostics because it offers a 'Wi-Fi Reset' option under the Window menu.

Answer

Network Utility

Answer

System Information > Wi-Fi

Answer

Terminal command 'sudo ifconfig en0 down'

Question 16

A technician is troubleshooting a Mac that fails to boot and displays a prohibitory symbol (a circle with a slash). The user had recently installed a new third-party SSD. What is the most likely cause?

Accepted Answer

The SSD is not properly connected or is incompatible with the Mac’s storage controller. The prohibitory symbol means macOS is found but cannot load due to incompatibility or corruption. A third-party SSD without proper firmware or formatting is a common cause, especially on newer Macs with T2 or Apple Silicon.

Answer

The SSD is formatted as NTFS

Answer

The user’s home folder is corrupted

Answer

The Mac’s NVRAM needs resetting

Question 17

A technician needs to deploy a custom configuration profile to 50 macOS devices in a lab. The profile must restrict access to System Settings and disable iCloud. Which tool is most appropriate for this task?

Accepted Answer

Apple Configurator. Apple Configurator is designed for creating and deploying configuration profiles to iOS and macOS devices. For large-scale deployments, MDM is preferred, but Configurator is the direct tool for profile creation and local deployment.

Answer

Terminal with 'profiles' command

Answer

System Preferences > Profiles

Answer

Remote Desktop

Question 18

A small business owner wants to restrict app installations on company Macs to only the Mac App Store to prevent employees from downloading unapproved software. Which macOS security feature should you configure?

Accepted Answer

Gatekeeper. Gatekeeper controls where apps can be installed from. Setting it to 'App Store' restricts installations to only Mac App Store apps, meeting the business requirement.

Answer

FileVault

Answer

System Integrity Protection (SIP)

Answer

Parental Controls

Question 19

A school IT administrator needs to remotely lock a lost MacBook and display a custom message with contact information. The MacBook is enrolled in the school’s MDM and has an internet connection. Which macOS feature should they use?

Accepted Answer

Find My Mac. Find My Mac is the built-in Apple feature for locating, locking, and erasing lost devices. For MDM-enrolled devices, the school can also use their MDM solution, but Find My Mac is the direct user-facing tool.

Answer

Remote Desktop

Answer

FileVault

Answer

Terminal command 'sudo pmset'

Question 20

During a macOS deployment, you need to create a bootable USB installer for macOS Sonoma to upgrade multiple iMacs. You have the 'Install macOS Sonoma' app in the Applications folder. Which command-line tool should you use to create the installer?

Accepted Answer

createinstallmedia. The 'createinstallmedia' utility is the built-in Apple tool for creating bootable macOS installers. It must be run from Terminal with the correct path to the installer app and the target volume.

Answer

diskutil

Answer

asr

Answer

hdiutil