nerdexam
CompTIA

SY0-301 · Question #847

Which of the following techniques describes the use of application isolation during execution to prevent system compromise if the application is compromised?

The correct answer is B. Sandboxing. Sandboxing isolates an application into a restricted execution environment so that a compromise of that application cannot affect the broader system.

Security architecture

Question

Which of the following techniques describes the use of application isolation during execution to prevent system compromise if the application is compromised?

Options

  • ALeast privilege
  • BSandboxing
  • CBlack box
  • DApplication hardening

How the community answered

(66 responses)
  • A
    3% (2)
  • B
    94% (62)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Sandboxing isolates an application into a restricted execution environment so that a compromise of that application cannot affect the broader system.

ALeast privilege

Least privilege restricts the permissions granted to a user or process but does not create an isolated execution container to prevent lateral movement if the application is compromised.

BSandboxingCorrect

Sandboxing creates a controlled, isolated environment with restricted access to system resources such as the file system, network, and memory. If a sandboxed application is exploited, the attacker is confined to the sandbox boundaries and prevented from escalating access to the underlying operating system or other processes.

CBlack box

Black box refers to a testing methodology where internal workings are unknown to the tester, not a technique for isolating application execution.

DApplication hardening

Application hardening reduces an application's attack surface through configuration and patching but does not create runtime isolation to contain a compromise.

Concept tested: Application sandboxing for execution isolation

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview

Topics

#sandboxing#application isolation#execution environment

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice