CompTIA Security+ (SY0-501) — Question 729

A company uses an enterprise desktop imaging solution to manage deployment of its desktop computers. Desktop computer users are only permitted to use software that is part of the baseline image. Which of the following technical solutions was MOST likely deployed by the company to ensure only known-good software can be installed on corporate desktops?

Answer options

• A. Network access control
• B. Configuration manager
• C. Application whitelisting
• D. File integrity checks

Correct answer: C

Explanation

Application whitelisting allows only pre-approved software to be installed and run on the desktops, ensuring compliance with the baseline image. Network access control and configuration managers focus more on access policies and software distribution rather than explicitly controlling which applications can be installed. File integrity checks monitor changes to files but do not prevent the installation of unapproved software.