Based on the Malware profile image below, what happens when a new custom-developed application attempts to execute on an endpoint?

Question

Exhibit

Options

• AIt will immediately execute
• BIt will not execute
• CIt will execute after one hour
• DIt will execute after the second attempt

• B
  89% (16)
• C
  6% (1)
• D
  6% (1)

Explanation

Option B is correct because the Malware profile shown uses an application allowlisting (default-deny) policy, meaning only pre-approved applications are permitted to run - a custom-developed application would be unknown to the system and therefore blocked at execution. Option A is wrong because the policy does not permit unknown executables to run freely, regardless of their source. Options C and D are wrong because allowlisting policies are not time-based or attempt-based - there is no built-in delay or retry grace period; the block is immediate and persistent unless the application is explicitly approved.

Memory tip: Think of allowlisting as a VIP guest list - if your name isn't on the list, you're not getting in, no matter how long you wait or how many times you try.

No community discussion yet for this question.