CompTIA Security+ (SY0-701) — Question 119

Which of the following would be the best way to block unknown programs from executing?

Answer options

• A. Access control list
• B. Application allow list
• C. Host-based firewall
• D. DLP solution

Correct answer: B

Explanation

The Application allow list is designed specifically to permit only pre-approved applications to execute, effectively blocking any unknown programs. In contrast, an Access control list manages permissions but does not inherently block unknown applications, while a Host-based firewall focuses on network traffic rather than application execution. A DLP solution, on the other hand, is primarily concerned with data loss prevention and does not address the execution of programs.