Which situation indicates application-level white listing?

Allowing everything and denying specific files describes blacklisting (blocklisting), which is a default-allow model - the opposite of whitelisting.

Allowing specific files while also explicitly denying specific files describes a hybrid or mixed policy, not pure application whitelisting, which uses a blanket deny for everything not on the approved list.

Writing attack information on a whiteboard is an informal awareness or briefing activity and has no relation to the technical security control of application whitelisting.

Whitelisting is defined by the principle of least privilege applied to execution: only files on the approved list are allowed, and all other executables are denied by default. This is the opposite of blacklisting and is considered a stronger security posture because unknown or new malware is blocked automatically without needing a signature update.