Cisco Cybersecurity Operations Fundamentals: Understanding Application Whitelisting

Application Whitelisting

Question

Which security technology allows only a set of pre-approved applications to run on a system?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

The security technology that allows only a set of pre-approved applications to run on a system is called application-level whitelisting.

Application-level whitelisting is a security strategy that focuses on allowing only pre-approved applications to run on a system. It is the opposite of application-level blacklisting, which blocks known malicious applications from running on a system. Application-level whitelisting is a proactive security measure that helps prevent unauthorized software from running on a system, thereby reducing the risk of security breaches and malware infections.

The process of creating a whitelist involves identifying the applications that are necessary for the system to function properly and adding them to the list of approved applications. The whitelist can be customized for different users or groups, depending on their specific needs. Once the whitelist is in place, any attempt to run an application that is not on the list will be blocked.

Application-level whitelisting can be implemented through a variety of methods, including group policy settings, system configuration files, and specialized software. Some of the benefits of application-level whitelisting include increased control over the software running on a system, improved security, and reduced risk of malware infections.

In summary, application-level whitelisting is a security technology that allows only a set of pre-approved applications to run on a system. It is a proactive security measure that can help prevent unauthorized software from running on a system, reducing the risk of security breaches and malware infections.