220-1102 Practice Question: A security administrator is tasked with…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Windows Defender Application Control (WDAC)

  WDAC is only available in Windows 10 Enterprise and Education editions, not in Pro. It requires domain or management tools for configuration.

• ✗

  Software Restriction Policies

  While available in Pro, Software Restriction Policies are an older and less flexible solution; AppLocker is the modern, recommended feature for application control.

• ✗

  Windows Sandbox

  Windows Sandbox provides an isolated environment to test untrusted applications but does not block applications from running in the main OS.

Technical deep dive

How to think about this question

The core concept being tested is application whitelisting on Windows 10 Pro workstations without domain integration, requiring a built-in, locally configurable solution. AppLocker is the ideal feature for this scenario. Mechanically, AppLocker allows administrators to create rules based on file attributes like publisher, product name, file name, file version, or the file's hash, as well as the path where the application is located. These rules can be configured to either allow or deny applications from running for specific users or groups. For a whitelisting strategy, the administrator would typically configure a default rule to block all unapproved applications and then create explicit allow rules for the necessary software. This granular control ensures that only trusted applications execute, significantly enhancing security by preventing the execution of malware or unauthorized software. The specific constraints of Windows 10 Pro and the requirement for local configuration are critical here. AppLocker is natively available in Windows 10 Pro (as well as Enterprise and Education editions) and can be managed directly on each workstation using the Local Group Policy Editor (gpedit.msc). This makes it perfectly suited for standalone machines not joined to an Active Directory domain, where central management tools like Group Policy Objects (GPOs) are not an option. In contrast, Windows Defender Application Control (WDAC), while a more advanced and robust application control solution, is exclusively available in Windows 10 Enterprise and Education editions. It also typically requires more sophisticated management tools or scripting for effective deployment and configuration across multiple machines, making it unsuitable for a fleet of standalone Pro workstations. Software Restriction Policies (SRP) are an older application control mechanism available in Windows 10 Pro. While SRP can perform whitelisting, it is less flexible and powerful than AppLocker. SRP primarily relies on path rules or hash rules, lacking AppLocker's ability to create rules based on publisher information, which is a much more robust and easier-to-manage method for trusted applications. AppLocker offers more granular control over rule enforcement, including different rule types and the ability to apply rules to specific users or groups, which SRP lacks in comparison. Finally, Windows Sandbox is a completely different technology; it provides a temporary, isolated desktop environment for safely running untrusted applications without affecting the host operating system. It does not function as a persistent application whitelisting or blocking mechanism for the main OS, thus not addressing the core requirement of the question.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…