nerdexam
CompTIA

SY0-501 · Question #421

Which of the following s the BEST reason to run an untested application is a sandbox?

The correct answer is C. To prevent the application from acquiring escalated privileges and accessing its host system. Running an untested application in a sandbox provides an isolated environment to contain potential threats and prevent harm to the host system.

Submitted by tunde_lagos· Mar 4, 2026Security architecture

Question

Which of the following s the BEST reason to run an untested application is a sandbox?

Options

  • ATo allow the application to take full advantage of the host system's resources and storage
  • BTo utilize the host systems antivirus and firewall applications instead of running it own protection
  • CTo prevent the application from acquiring escalated privileges and accessing its host system
  • DTo increase application processing speed so the host system can perform real-time logging

How the community answered

(47 responses)
  • A
    15% (7)
  • B
    4% (2)
  • C
    70% (33)
  • D
    11% (5)

Why each option

Running an untested application in a sandbox provides an isolated environment to contain potential threats and prevent harm to the host system.

ATo allow the application to take full advantage of the host system's resources and storage

A sandbox typically limits, rather than maximizes, an application's access to host system resources and storage to maintain isolation and security.

BTo utilize the host systems antivirus and firewall applications instead of running it own protection

The primary purpose of a sandbox is to isolate the application from the host system, not to rely on the host's antivirus or firewall as its primary protection mechanism, although host-level security still operates.

CTo prevent the application from acquiring escalated privileges and accessing its host systemCorrect

A sandbox creates an isolated, controlled environment, preventing the application from interacting directly with the host operating system's critical resources or gaining elevated permissions. This containment protects the host system from potential malware, vulnerabilities, or unintended side effects of the untested application.

DTo increase application processing speed so the host system can perform real-time logging

Running an application in a sandbox usually introduces some overhead, which can decrease processing speed, and its main goal is security isolation, not performance enhancement for real-time logging.

Concept tested: Application sandboxing for security and isolation

Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview

Topics

#sandbox#application isolation#privilege escalation prevention#security controls

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice