nerdexam
(ISC)2

SSCP · Question #233

Which of the following is NOT true concerning Application Control?

The correct answer is D. It is non-transparent to the endpoint applications so changes are needed to the applications. The false statement about Application Control is that it is non-transparent and requires changes to endpoint applications.

Submitted by certguy· Apr 18, 2026Systems and Application Security

Question

Which of the following is NOT true concerning Application Control?

Options

  • AIt limits end users use of applications in such a way that only particular screens are visible.
  • BOnly specific records can be requested through the application controls
  • CParticular usage of the application can be recorded for audit purposes
  • DIt is non-transparent to the endpoint applications so changes are needed to the applications

How the community answered

(29 responses)
  • B
    3% (1)
  • C
    7% (2)
  • D
    90% (26)

Why each option

The false statement about Application Control is that it is non-transparent and requires changes to endpoint applications.

AIt limits end users use of applications in such a way that only particular screens are visible.

Application control can indeed be configured to limit user interaction to specific screens or functions within an application, providing granular access control.

BOnly specific records can be requested through the application controls

Application controls, particularly those integrated with data access policies, can restrict users to requesting or accessing only specific records through an application.

CParticular usage of the application can be recorded for audit purposes

Modern application control and security solutions typically include robust logging and auditing capabilities to record application usage for compliance, forensic analysis, and security monitoring.

DIt is non-transparent to the endpoint applications so changes are needed to the applicationsCorrect

Application control solutions are generally designed to operate transparently to endpoint applications, enforcing policies on what applications can run or how they behave without requiring modifications to the applications themselves. Requiring application changes would make deployment and management prohibitively complex for most organizations, especially for third-party software.

Concept tested: Application Control characteristics

Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/wdac-overview

Topics

#Application Control#Endpoint Security#System Security#Security Controls

Community Discussion

No community discussion yet for this question.

Full SSCP Practice