220-1102 Practice Question: A small business owner asks you to configure…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Disable the browser's developer mode in the settings.

  Why it's wrong here

  Disabling the browser's developer mode primarily prevents the manual loading of unpacked extensions from local files, which is typically used for development and testing purposes. However, it does not restrict users from installing extensions directly from official browser web stores or prevent extensions from being pushed via enterprise management tools. Therefore, it is ineffective for comprehensively blocking unauthorized extension installations across an organization.

• ✗

  Set the browser to always use private browsing mode.

  Why it's wrong here

  Setting a browser to always use private browsing mode, such as Incognito or InPrivate, is designed to prevent the browser from saving local browsing history, cookies, site data, and information entered in forms for that specific session. This mode operates at the session level and has no inherent functionality to control or block the installation of browser extensions, which are persistent components of the user's browser profile and remain installed regardless of the browsing mode.

• ✓

  Use Group Policy to block extension installation and whitelist approved extensions.

  Why this is correct

  Utilizing Group Policy (GPO) provides a robust, centralized management solution for Windows environments, allowing administrators to precisely control browser settings across multiple machines. By configuring specific GPO settings, an administrator can enforce policies that block all extension installations by default, while simultaneously whitelisting only approved extensions necessary for business operations. This method ensures consistent security and compliance by preventing unauthorized software from being introduced into the browser environment.

• ✗

  Install a pop-up blocker on each computer.

  Why it's wrong here

  Installing a pop-up blocker on each computer is a browser feature or add-on specifically designed to prevent new browser windows or tabs from opening automatically without user interaction, often used to suppress advertisements. Its functionality is limited to managing unsolicited content windows and does not extend to controlling the installation process of browser extensions. Extension installations are typically initiated by user consent or administrative deployment, making a pop-up blocker irrelevant for this security concern.

Go deeper

Related to this question