SSCP Systems and Application Security Practice Question
An organization is implementing Windows Defender Application Control (WDAC) to prevent unauthorized applications from running on company workstations. Which of the following best describes the primary security benefit of this approach?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It prevents execution of any application not explicitly allowed
WDAC is a whitelisting technology that only allows approved applications to execute, effectively blocking malware and unauthorized software by default.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It prevents execution of any application not explicitly allowed
Why this is correct
Whitelisting blocks unapproved applications, which is the core security benefit of WDAC.
- ✗
It encrypts application binaries at rest
Why it's wrong here
Encryption is not a function of WDAC; BitLocker handles encryption.
- ✗
It automatically updates applications from a trusted source
Why it's wrong here
WDAC does not manage updates; it controls execution based on policies.
- ✗
It ensures that all applications are digitally signed
Why it's wrong here
WDAC can be configured to enforce signing, but its primary benefit is whitelisting, not signing itself.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security analyst is hardening a new Windows server. Which configuration would MOST effectively reduce the attack surface by limiting the software that can execute?
easy- A.Enable Windows Defender Antivirus
- B.Disable AutoPlay
- C.Enable User Account Control (UAC)
- ✓ D.Configure AppLocker rules
Why D: AppLocker is a whitelisting technology that restricts which applications can run, reducing the attack surface.
Variation 2. A company is implementing application whitelisting on all endpoints. Which of the following is a primary consideration for maintaining operational efficiency?
easy- A.Ensuring that all users have local administrator rights
- B.Deploying a host-based firewall on each endpoint
- ✓ C.Establishing a process to add approved applications to the whitelist
- D.Disabling Windows Defender Antivirus to reduce resource usage
Why C: Application whitelisting requires a process for updating the whitelist when new legitimate software is needed; otherwise, users may be blocked from necessary applications.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.