mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business uses a shared iMac for customer…
A small business uses a shared iMac for customer check-ins. The manager wants to restrict which apps users can open and prevent changes to system settings without creating separate user accounts. Which macOS feature should you configure to meet this requirement?
⚠ Common exam trap
Watch out — candidates often confuse Guest User accounts with managed restrictions, not realizing that Guest User only provides a clean session without persistent data but no app or settings controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Parental Controls (Screen Time) for the user account
Parental Controls (Screen Time) allows administrators to restrict app usage and system settings changes on a per-user basis without creating separate user accounts. This feature can limit which applications a user can open and prevent modifications to system preferences, meeting the manager's requirement directly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable FileVault full-disk encryption
Why it's wrong here
FileVault is a macOS security feature that encrypts the entire startup disk, protecting data at rest from unauthorized access if the device is lost or stolen. While it secures the data, it operates at a lower level than user access controls. It does not provide any mechanism to limit specific application usage, block access to certain apps, or prevent changes to system settings once a user has successfully logged into the operating system. Therefore, it fails to address the requirement of restricting customer interaction with the system.
- ✓
Configure Parental Controls (Screen Time) for the user account
Why this is correct
Configuring Parental Controls, now integrated within Screen Time in macOS, is the most effective solution for this scenario. This feature allows an administrator to precisely define which applications a standard user account can access, block specific apps entirely, set time limits for app usage, and restrict modifications to critical system settings. By applying these granular restrictions to the shared customer account, the business can ensure customers only interact with approved applications and cannot alter the system configuration.
- ✗
Use the Guest User account
Why it's wrong here
The Guest User account in macOS provides a temporary, sandboxed environment that automatically deletes all user data and settings upon logout. While it offers a clean slate for each new session, it lacks the necessary granular control to restrict specific applications or prevent access to system settings. Guests typically have limited privileges but can still launch most installed applications, which does not meet the requirement of precisely controlling customer interactions with the iMac.
- ✗
Apply a firmware password
Why it's wrong here
A firmware password, also known as an EFI firmware password, is a security measure that prevents unauthorized users from booting the Mac from any storage device other than the designated startup disk, or from changing startup disk settings. It protects against bypassing macOS security by booting into recovery mode or an external drive. However, once macOS successfully boots and a user logs in, the firmware password offers no protection or restriction regarding application usage or system settings within the running operating system.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.