SC-100 Practice Question 3953

Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: hard
An architect is designing endpoint protection for 10,000 corporate laptops. You need to prevent unauthorized executable code and scripts from running unless explicitly whitelisted by IT. Which Windows platform technology provides hardware-enforced code integrity?

Answer Options

A
Windows Defender Application Control (WDAC)
B
Windows Disk Cleanup utility
C
BitLocker Drive Encryption
D
Microsoft Edge SmartScreen only

Correct Answer

A: Windows Defender Application Control (WDAC)

Explanation

Windows Defender Application Control (WDAC) enforces application whitelisting and code integrity policies at the kernel level, blocking unsigned or unapproved executables and scripts.