SY0-501 · Question #283
A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?
The correct answer is D. Blacklisting. To prevent a specific set of known applications from being used on company computers, a security administrator should implement blacklisting.
Question
A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?
Options
- AWhitelisting
- BAnti-malware
- CApplication hardening
- DBlacklisting
- EDisable removable media
How the community answered
(14 responses)- A14% (2)
- B7% (1)
- D71% (10)
- E7% (1)
Why each option
To prevent a specific set of known applications from being used on company computers, a security administrator should implement blacklisting.
Whitelisting prevents all applications from running unless they are explicitly identified and approved, which is a more restrictive approach than just preventing a 'known set' of unwanted ones.
Anti-malware software primarily detects and quarantines malicious code, which is different from preventing specific legitimate but unwanted applications defined by company policy.
Application hardening focuses on securing an application's configuration and environment to reduce vulnerabilities, not on preventing its execution based on a prohibited list.
Blacklisting is an application control method where a security administrator explicitly identifies and prevents specific applications from running based on a predefined list of prohibited software. This directly fulfills the requirement to prevent the use of a 'known set of applications' that the company deems undesirable.
Disabling removable media prevents software from being introduced via USB drives, but it does not prevent already installed applications or those distributed via other means from running.
Concept tested: Application control via blacklisting
Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/wdac-design-guide
Topics
Community Discussion
No community discussion yet for this question.