You have deployed an enterprise-wide-host/endpoint technology for all of the company corporate PCs Management asks you to block a selected set application on all corporate PCs. Which technology is…

Application whitelisting and blacklisting operates directly on the host operating system to control which executables are allowed or blocked from running. It is the only option listed that acts at the endpoint level and targets specific applications by name, hash, publisher, or path, making it the correct choice for selectively blocking a defined set of applications across all corporate PCs.

Antivirus and antispyware software is designed to detect and remove malicious code, not to administratively block specific legitimate or unauthorized applications by policy.

A network next-generation firewall controls traffic between network segments and cannot enforce per-application execution policies on individual host operating systems.

A host-based IDS monitors and alerts on suspicious activity but is not designed to actively block application execution.