easyMultiple ChoiceObjective-mapped
220-1102 Practice Question: A small business owner wants to ensure that…
A small business owner wants to ensure that employees cannot install unauthorized browser extensions on company-managed Windows 10 computers. Which method should you use to enforce this restriction?
⚠ Common exam trap
Candidates often confuse browser security features (like private browsing or homepage settings) with actual policy-based controls, overlooking that only Group Policy or registry-based policies can centrally enforce restrictions on extension installation in a managed environment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Group Policy to block extension installation
Group Policy allows administrators to centrally manage Windows settings, including browser policies. By configuring the 'Block installation of extensions' policy under Administrative Templates for each browser (e.g., Chrome, Edge), you can prevent users from installing unauthorized extensions on company-managed Windows 10 computers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable private browsing mode in each browser
Why it's wrong here
Enabling private browsing mode, often called Incognito or InPrivate, primarily prevents the browser from saving browsing history, cookies, site data, and information entered in forms locally on the device. While it offers a degree of privacy by not leaving a local trace, it does not restrict a user's ability to install new browser extensions or modify existing browser configurations. Therefore, it is ineffective for controlling extension installations across employees.
- ✓
Configure Group Policy to block extension installation
Why this is correct
Configuring Group Policy to block extension installation is the most effective administrative control for domain-joined computers. Group Policy Objects (GPOs) allow network administrators to centrally define and enforce specific browser settings, including disabling the ability to install extensions, across all user accounts and machines within an Microsoft Active Directory domain. This ensures consistent security and compliance by preventing unauthorized software from being added to browsers.
- ✗
Set the browser homepage to a company-approved site
Why it's wrong here
Setting the browser homepage to a company-approved site only dictates the initial page loaded when the browser is launched or a new tab is opened. This configuration is purely navigational and has no inherent mechanism to restrict or prevent users from installing browser extensions. It does not interact with the browser's security or administrative settings that govern extension management, making it irrelevant for this purpose.
- ✗
Install an ad-blocker extension
Why it's wrong here
Installing an ad-blocker extension is designed to filter and block advertisements from appearing on web pages, improving browsing speed and reducing distractions. While beneficial for user experience, an ad-blocker is itself an extension and does not possess any administrative capabilities to prevent the installation of other, potentially unwanted, browser extensions by users. Its function is limited to content filtering, not system-wide policy enforcement.
Go deeper
Related to this question
Learn chapter
Windows Editions and Features
Key term
Group Policy
Group Policy is a Windows-based feature that allows administrators to centrally manage and enforce settings for users and computers across an organization.
Key term
Windows
Windows is a family of operating systems developed by Microsoft that manages computer hardware and software, providing a graphical user interface for users to interact with their devices.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.