hardMultiple ChoiceObjective-mapped
220-1202 Practice Question: Deploy a custom configuration profile to 20 Mac…
A technician needs to deploy a custom configuration profile to 20 Mac computers in a small office without using a third-party MDM. The profile must enforce Wi-Fi settings and disable iCloud. Which macOS tool can create and sign this configuration profile?
⚠ Common exam trap
Candidates often confuse Apple Configurator (which creates and signs profiles) with built-in tools like System Settings or the 'profiles' terminal command, which only install or manage existing profiles—not create or sign them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Apple Configurator
Apple Configurator is the correct tool because it can create and sign custom configuration profiles (.mobileconfig files) for macOS without requiring a third-party MDM. It allows a technician to specify Wi-Fi settings and restrictions like disabling iCloud, then export the signed profile for manual deployment to the 20 Macs via USB or email.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Apple Configurator
Why this is correct
Apple Configurator is the correct tool because it provides a graphical user interface specifically designed for creating, editing, and digitally signing custom configuration profiles (.mobileconfig files) for both macOS and iOS/iPadOS devices. This standalone utility is ideal for technicians needing to deploy specific settings, restrictions, or network configurations to a small number of devices without the overhead of a full Mobile Device Management (MDM) solution.
- ✗
System Settings > Profiles
Why it's wrong here
System Settings (formerly System Preferences) offers an interface solely for reviewing the details of configuration profiles already installed on a macOS device, and for removing them. It provides no functionality whatsoever for authoring new `.mobileconfig` files, modifying their payload contents, or applying digital signatures. This is a user-facing management pane, not a profile creation utility.
- ✗
Terminal with 'profiles' command
Why it's wrong here
The `profiles` command in Terminal is a command-line utility primarily used for managing the lifecycle of *existing* configuration profiles on a macOS device, allowing for installation, listing, and removal. While powerful for deployment and auditing, it lacks the inherent capability to generate the complex XML structure of a new `.mobileconfig` file from scratch or to apply the necessary cryptographic signing required for secure profile distribution.
- ✗
Profile Manager in macOS Server
Why it's wrong here
Profile Manager was an integrated Mobile Device Management (MDM) solution included with macOS Server, designed to centralize the deployment and management of configuration profiles for Apple devices. However, macOS Server itself has been officially deprecated by Apple, meaning Profile Manager is no longer supported, receives no updates, and is not recommended for new deployments due to security and functionality limitations.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.