CompTIA Security+ (SY0-501) — Question 992

Which of the following would provide a safe environment for an application to access only the resources needed to function while not having access to run at the system level?

Answer options

• A. Sandbox
• B. Honeypot
• C. GPO
• D. DMZ

Correct answer: A

Explanation

The correct answer is A, Sandbox, as it is specifically designed to isolate applications and restrict their access to system resources. A Honeypot (B) is used to attract and monitor malicious activity, while GPO (C) refers to Group Policy Objects that manage user and computer settings in Windows environments. DMZ (D) is a network segment used for hosting external-facing services, not specifically for application isolation.