easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business owner wants to deploy a custom…
A small business owner wants to deploy a custom inventory app to five company-owned iPads. The app is not available on the App Store. Which method should you use to install it?
⚠ Common exam trap
CompTIA often tests the misconception that iOS supports general sideloading or direct file installation like Android, when in reality iOS strictly controls app installation through the App Store, enterprise distribution, or supervised device management tools like Apple Configurator.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Apple Configurator to install the app directly.
Apple Configurator allows IT administrators to install enterprise or custom in-house apps directly onto supervised iOS devices without requiring the App Store. Since the app is not available on the App Store and the iPads are company-owned, Apple Configurator provides a supported, secure method for direct installation using a Mac.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use Apple Configurator to install the app directly.
Why this is correct
Apple Configurator is a macOS application designed for mass deployment and management of iOS devices in an organizational setting. It enables IT administrators to supervise devices, install custom in-house applications (often referred to as Line of Business apps) directly onto them, provided these apps are properly signed with an Apple Enterprise Developer Program certificate. This method bypasses the App Store, making it ideal for proprietary business tools not intended for public distribution.
- ✗
Download the app from a third-party website and open it in Safari.
Why it's wrong here
iOS devices are designed with a robust security model that prevents the direct installation of applications downloaded from arbitrary third-party websites via Safari. The operating system strictly enforces that apps must originate from the Apple App Store or be deployed through approved enterprise channels (like MDM or Configurator) with proper signing. Attempting to open an unsigned application package (.ipa file) directly from a browser would result in a security error, not an installation prompt, safeguarding against malware and unauthorized software.
- ✗
Email the app file to each user and have them install it.
Why it's wrong here
iOS does not permit the installation of applications directly from email attachments. When an application package (.ipa file) is received via email, the operating system will not recognize it as an installable executable but rather as an unopenable file type or a document that cannot be processed for installation. This security measure prevents users from inadvertently installing potentially malicious or unauthorized software, reinforcing the controlled app distribution ecosystem.
- ✗
Enable sideloading in Settings and install via iTunes.
Why it's wrong here
iOS does not feature a general "sideloading" toggle within its Settings, as its security architecture is designed to prevent arbitrary app installations outside of the App Store or approved enterprise channels. While iTunes (or Finder on newer macOS versions) can sync media and manage device backups, it no longer supports direct app installation from local .ipa files onto iOS devices for consumer use. Enterprise app deployment relies on Mobile Device Management (MDM) solutions or Apple Configurator, not a non-existent sideloading option or consumer-focused syncing software.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.