easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business owner wants to ensure that only…
A small business owner wants to ensure that only authorized users can access their iMac. They need to set up separate accounts for three employees, each with a username and password, and restrict one employee from installing software. Which macOS feature should they use to create and manage these user accounts?
⚠ Common exam trap
Candidates often confuse the 'Users & Groups' GUI with the command-line 'dscl' tool, thinking both are equally appropriate for a non-technical business owner, but the exam expects you to recognize that the GUI is the correct and intended method for typical user management scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
System Settings > Users & Groups.
The 'Users & Groups' pane in System Settings (macOS Ventura and later) is the native graphical interface for creating, editing, and managing local user accounts, including setting passwords and controlling administrative privileges. It allows the owner to create separate accounts for each employee and restrict one from installing software by setting that account as a 'Standard' user rather than an 'Administrator'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
System Settings > Users & Groups.
Why this is correct
This is the primary graphical interface in macOS for managing local user accounts and their associated privileges. To restrict an employee from installing software, an administrator would create or modify their account to be a "Standard" user, which inherently prevents system-wide software installations without administrator authentication. Additionally, more granular restrictions on app installation can be configured via Screen Time settings, often accessible or managed in conjunction with user accounts, providing robust control over user capabilities.
- ✗
Terminal with the 'dscl' command.
Why it's wrong here
Using `dscl` in Terminal allows direct manipulation of the Open Directory user database, but this command-line tool requires manual entry of each account attribute and does not provide a graphical interface for setting parental-style installation restrictions. The stem specifies restricting one employee from installing software, which macOS enforces through the "Parental Controls" or "Managed Apple ID" settings in System Settings, not through `dscl`. This option is tempting because `dscl` is the correct tool for scripting bulk user creation in enterprise environments where no GUI is available, such as when deploying multiple Macs via configuration profiles.
- ✗
System Information > Software > Installations.
Why it's wrong here
System Information is a diagnostic utility that provides detailed reports about a macOS system's hardware and software configuration, including a list of installed applications. While it can show what software is present, it is purely an informational tool and offers no administrative capabilities to manage user accounts, modify permissions, or enforce restrictions on software installation. It serves as a read-only inventory, not a control panel.
- ✗
Keychain Access to create user passwords.
Why it's wrong here
Keychain Access is a macOS utility specifically designed to securely store and manage passwords, cryptographic keys, and digital certificates for applications, websites, and network services. It manages credentials for users but does not create or manage the user accounts themselves. Therefore, it cannot be used to establish new user accounts, define their account types (e.g., Standard vs. Administrator), or implement system-level restrictions like preventing software installations.
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.