Courseiva
hardMultiple ChoiceObjective-mapped

220-1102 Practice Question: Deploy a custom configuration profile to 20 Mac…

A technician needs to deploy a custom configuration profile to 20 Mac computers in a small office without using a third-party MDM. The profile must enforce Wi-Fi settings and disable iCloud. Which macOS tool can create and sign this configuration profile?

⚠ Common exam trap

Candidates often confuse Apple Configurator (which creates and signs profiles) with built-in tools like System Settings or the 'profiles' terminal command, which only install or manage existing profiles—not create or sign them.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Apple Configurator

Apple Configurator is the correct tool because it can create and sign custom configuration profiles (.mobileconfig files) for macOS without requiring a third-party MDM. It allows a technician to specify Wi-Fi settings and restrictions like disabling iCloud, then export the signed profile for manual deployment to the 20 Macs via USB or email.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Apple Configurator

    Why this is correct

    Apple Configurator is the correct tool because it provides a graphical user interface specifically designed for creating, editing, and digitally signing custom configuration profiles (.mobileconfig files) for both macOS and iOS/iPadOS devices. This standalone utility is ideal for technicians needing to deploy specific settings, restrictions, or network configurations to a small number of devices without the overhead of a full Mobile Device Management (MDM) solution.

  • System Settings > Profiles

    Why it's wrong here

    System Settings (formerly System Preferences) offers an interface solely for reviewing the details of configuration profiles already installed on a macOS device, and for removing them. It provides no functionality whatsoever for authoring new `.mobileconfig` files, modifying their payload contents, or applying digital signatures. This is a user-facing management pane, not a profile creation utility.

  • Terminal with 'profiles' command

    Why it's wrong here

    The `profiles` command in Terminal is a command-line utility primarily used for managing the lifecycle of *existing* configuration profiles on a macOS device, allowing for installation, listing, and removal. While powerful for deployment and auditing, it lacks the inherent capability to generate the complex XML structure of a new `.mobileconfig` file from scratch or to apply the necessary cryptographic signing required for secure profile distribution.

  • Profile Manager in macOS Server

    Why it's wrong here

    Profile Manager was an integrated Mobile Device Management (MDM) solution included with macOS Server, designed to centralize the deployment and management of configuration profiles for Apple devices. However, macOS Server itself has been officially deprecated by Apple, meaning Profile Manager is no longer supported, receives no updates, and is not recommended for new deployments due to security and functionality limitations.

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

About these practice questions

One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.