nerdexam
CompTIA

SY0-701 · Question #100

Which of the following can best protect against an employee inadvertently installing malware on a company system?

The correct answer is D. Application allow list. An application allow list is a security technique that specifies which applications are authorized to run on a system and blocks all other applications. An application allow list can best protect against an employee inadvertently installing malware on a company system because…

Submitted by brentm· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

Which of the following can best protect against an employee inadvertently installing malware on a company system?

Options

  • AHost-based firewall
  • BSystem isolation
  • CLeast privilege
  • DApplication allow list

How the community answered

(47 responses)
  • A
    11% (5)
  • B
    6% (3)
  • C
    4% (2)
  • D
    79% (37)

Explanation

An application allow list is a security technique that specifies which applications are authorized to run on a system and blocks all other applications. An application allow list can best protect against an employee inadvertently installing malware on a company system because it prevents the execution of any unauthorized or malicious software, such as viruses, worms, trojans, ransomware, or spyware. An application allow list can also reduce the attack surface and improve the performance of the system.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice