Which of the following is a method that allows only specific applications to run on a system?

Prepare for the Information Systems and Controls (ISC) CPA Exam. Study with flashcards and multiple-choice questions, each with hints and explanations. Get ready to excel!

Whitelisting is a method that enables only specific applications to run on a system by creating an approved list of software that is permitted to execute. This approach enhances security by preventing unauthorized or potentially harmful applications from being executed, thereby reducing the system's vulnerability to malware and other security threats.

By specifically allowing only certain applications, organizations can better control their environment and ensure that only trusted software is in use. This method contrasts with other security measures, which might allow a broader range of applications but do not provide the same level of granularity in controlling what can execute on a system.

For instance, while the principle of least privilege entails giving users only those permissions necessary for them to perform their job functions, it does not directly restrict which applications can run. Similarly, zero trust focuses on verifying every access attempt, but it does not specifically restrict applications. Multi-factor authentication enhances security for user access but does not manage application execution directly. Thus, whitelisting stands out as the most effective method for controlling which applications are allowed to run.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy