nerdexam
CompTIA

SY0-501 · Question #283

A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?

The correct answer is D. Blacklisting. To prevent a specific set of known applications from being used on company computers, a security administrator should implement blacklisting.

Submitted by noor.lb· Mar 4, 2026Security operations

Question

A company would like to prevent the use of a known set of applications from being used on company computers. Which of the following should the security administrator implement?

Options

  • AWhitelisting
  • BAnti-malware
  • CApplication hardening
  • DBlacklisting
  • EDisable removable media

How the community answered

(14 responses)
  • A
    14% (2)
  • B
    7% (1)
  • D
    71% (10)
  • E
    7% (1)

Why each option

To prevent a specific set of known applications from being used on company computers, a security administrator should implement blacklisting.

AWhitelisting

Whitelisting prevents all applications from running unless they are explicitly identified and approved, which is a more restrictive approach than just preventing a 'known set' of unwanted ones.

BAnti-malware

Anti-malware software primarily detects and quarantines malicious code, which is different from preventing specific legitimate but unwanted applications defined by company policy.

CApplication hardening

Application hardening focuses on securing an application's configuration and environment to reduce vulnerabilities, not on preventing its execution based on a prohibited list.

DBlacklistingCorrect

Blacklisting is an application control method where a security administrator explicitly identifies and prevents specific applications from running based on a predefined list of prohibited software. This directly fulfills the requirement to prevent the use of a 'known set of applications' that the company deems undesirable.

EDisable removable media

Disabling removable media prevents software from being introduced via USB drives, but it does not prevent already installed applications or those distributed via other means from running.

Concept tested: Application control via blacklisting

Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/wdac-design-guide

Topics

#blacklisting#application control#endpoint security#allow/deny lists

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice