Courseiva
← FC0-U71
Full test
mediumMultiple ChoiceObjective-mapped

FC0-U71 Practice Question: Refer to the exhibit

Exhibit

{
  "name": "AppLocker Policy",
  "enforcement": "Enforce",
  "rules": [
    {
      "type": "Path",
      "path": "C:\\Program Files\\*",
      "action": "Allow"
    },
    {
      "type": "Path",
      "path": "C:\\Windows\\*",
      "action": "Allow"
    },
    {
      "type": "Publisher",
      "publisher": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US",
      "action": "Allow"
    }
  ]
}

Refer to the exhibit. A technician is troubleshooting why a user cannot run a custom application installed in D:\Apps. Based on the exhibit, what is the MOST likely reason?

⚠ Common exam trap

Many candidates assume 'Enforce' mode blocks all unlisted apps, but the actual issue is the missing path rule for D:\Apps, not the enforcement mode itself.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The policy does not include a rule for D:\Apps.

The exhibit shows a software restriction policy that includes path rules for C:\Program Files and C:\Windows, but no rule for D:\Apps. Since the policy does not explicitly allow the custom application installed in D:\Apps, it is blocked by default. This is the most likely reason the user cannot run the application.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The path rule for C:\Program Files is too broad.

    Why it's wrong here

    Even if broad, it does not affect apps in D:\Apps.

  • ✓

    The policy does not include a rule for D:\Apps.

    Why this is correct

    No rule allows execution from D:\Apps, so the custom app is blocked.

  • ✗

    The publisher rule is incorrect.

    Why it's wrong here

    The publisher rule is valid for Microsoft-signed apps, but it does not apply to the custom app.

  • ✗

    The enforcement mode is set to Enforce, blocking all unlisted apps.

    Why it's wrong here

    While enforcement matters, the specific reason is the lack of a rule for D:\Apps.

About these practice questions

This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.