mediumMultiple ChoiceObjective-mapped
220-1102 Practice Question: A company uses AppLocker to control which…
A company uses AppLocker to control which applications can run on Windows 10 workstations. A user needs to run a portable application from a USB drive for a presentation, but it is blocked by AppLocker. The user has local admin rights. What is the best way to allow this specific application while maintaining security?
⚠ Common exam trap
Many candidates assume local admin rights can override AppLocker restrictions, but AppLocker operates at a lower security layer that applies to all users, including administrators.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a new AppLocker path rule for the USB drive.
AppLocker enforces application control policies regardless of user privileges, including local admin rights. Creating a new path rule for the USB drive allows the specific portable application to run while keeping AppLocker active and maintaining security for other executables. This is the correct approach because it grants a targeted exception without disabling the entire control mechanism.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Temporarily disable AppLocker service.
Why it's wrong here
Disabling the AppLocker service (Application Identity service) would indeed remove all application control restrictions, allowing any application to run, including the one from the USB drive. However, this action completely bypasses the security policy, creating a significant vulnerability by permitting unauthorized or malicious software to execute. This approach is a severe security risk and undermines the entire purpose of implementing AppLocker.
- ✗
Add the user to the 'Power Users' group.
Why it's wrong here
Adding a user to the 'Power Users' group does not grant any special privileges that would bypass AppLocker policies. AppLocker rules are enforced at a system level, independent of standard user group memberships like 'Power Users', which primarily control access to certain system settings and legacy applications. AppLocker evaluates application execution based on defined rules (publisher, path, file hash) for all users, regardless of their administrative or power user status.
- ✓
Create a new AppLocker path rule for the USB drive.
Why this is correct
Creating a new AppLocker path rule specifically for the USB drive's location (e.g., "E:\*" or "E:\ApplicationName.exe") is the most appropriate and secure solution. This method allows the desired application to execute from the specified removable media while maintaining all other AppLocker restrictions for other applications and locations. It provides granular control, ensuring the company's security posture remains intact for all other software.
- ✗
Run the application as Administrator.
Why it's wrong here
Running an application as an Administrator does not bypass AppLocker rules; it only elevates the application's privileges once it is permitted to run. AppLocker evaluates whether an application is allowed to execute *before* any User Account Control (UAC) prompts or privilege elevations occur. If an AppLocker rule blocks an application, it will be prevented from launching, regardless of whether the user attempts to run it with administrative rights.
Go deeper
Related to this question
Learn chapter
Windows Editions and Features
Key term
Windows
Windows is a family of operating systems developed by Microsoft that manages computer hardware and software, providing a graphical user interface for users to interact with their devices.
Key term
Application Control
Application Control is a security feature in Windows that allows administrators to specify exactly which applications are allowed to run on a device, blocking everything else by default.
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.