easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business owner wants to restrict app…
A small business owner wants to restrict app installations on company Macs to only the Mac App Store to prevent employees from downloading unapproved software. Which macOS security feature should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Gatekeeper
Gatekeeper controls where apps can be installed from. Setting it to 'App Store' restricts installations to only Mac App Store apps, meeting the business requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
FileVault
Why it's wrong here
FileVault is Apple's full-disk encryption feature, designed to protect the data stored on a Mac's startup disk by encrypting its entire contents. Its primary function is to prevent unauthorized access to data if the device is lost or stolen, rendering the information unreadable without the correct password or recovery key. This security measure operates at the storage layer and has no functionality to regulate or restrict the sources from which applications can be installed by users.
- ✗
System Integrity Protection (SIP)
Why it's wrong here
System Integrity Protection (SIP), introduced in OS X El Capitan, is a security feature that restricts the root user and other users from modifying protected files and folders on the Mac operating system. It safeguards critical system directories, processes, and kernel extensions from malicious software or accidental changes, even with administrative privileges. While crucial for system stability and security, SIP does not govern the installation of user-level applications or restrict their sources, as it focuses on protecting the core OS.
- ✓
Gatekeeper
Why this is correct
Gatekeeper is a macOS security feature that enforces policies regarding the installation and execution of applications downloaded from the internet. It allows administrators to configure which sources are permitted for app installations, offering options such as "App Store," "App Store and identified developers," or "Anywhere." By verifying the digital signature of applications against Apple's developer ID certificates, Gatekeeper effectively prevents the execution of unsigned or untrusted software, directly addressing the need to restrict app installations.
- ✗
Parental Controls
Why it's wrong here
Parental Controls, now integrated into Screen Time settings on macOS, are designed to manage and restrict access for specific user accounts, typically those used by children. These controls allow parents to set time limits, restrict access to certain websites, and limit application usage for designated users. However, they are not intended as a system-wide enterprise solution for restricting app installations across all users or enforcing general business security policies on application sources.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.