220-1102 Question 5
Single answermacOSA user brings you a MacBook running macOS and reports that a newly installed application will not open. When the user double-clicks the app, macOS displays a message that the app is from an unidentified developer and blocks it from launching. The user confirms the app was downloaded from the vendor's official website and business policy allows its use. Which action should the technician take FIRST to allow the user to run the application while following macOS security best practices?
- A
Open System Settings, go to Privacy & Security, and allow the blocked app to open from there
- B
Disable FileVault so macOS will stop blocking unsigned applications
- C
Boot into Recovery Mode and disable System Integrity Protection
- D
Use Disk Utility First Aid to repair the startup volume before opening the application
Show answer and explanation
Correct answer: A
Explanation
This scenario is testing practical knowledge of macOS security features, especially Gatekeeper. When macOS blocks an app from an unidentified developer, the best-practice response is not to disable core protections like SIP or unrelated features like FileVault. Instead, the technician should verify the source and then use the built-in approval method in Privacy & Security, or the contextual Open method if available. Apple documents Gatekeeper as the mechanism that helps ensure only trusted software runs on macOS, and its recommended workflow is to explicitly allow trusted apps rather than weakening broader system security settings. This aligns with A+ Core 2 expectations: identify the security feature involved, choose the least disruptive fix, and preserve the system's overall security posture.
- A. Correct.
Correct. In macOS, Gatekeeper may block apps from unidentified developers. If the software is trusted and permitted by policy, the proper first step is to go to System Settings > Privacy & Security and use the option to open or allow the blocked app. On some versions of macOS, the user can also Control-click the app and choose Open to approve it. This follows Apple's intended security workflow without broadly weakening system protections.
- B. Incorrect.
Incorrect. FileVault is full-disk encryption for protecting data at rest. It does not control whether an app from an unidentified developer can launch. A technician choosing this option may be confusing encryption features with application security controls.
- C. Incorrect.
Incorrect. System Integrity Protection protects critical system files and processes. Disabling SIP is not an appropriate first response for a blocked third-party app and would significantly reduce system security. Gatekeeper approval should be used instead.
- D. Incorrect.
Incorrect. Disk Utility First Aid checks and repairs file system issues, but it does not address Gatekeeper or app-signing warnings. Someone might choose this if they assume the app failed due to disk corruption rather than a macOS security control.