Winona has set up AppLocker rules to protect computers on the company network from being infected by malware. Despite this, one of the computers is infected by malware. She identifies that the malware infected the computer when a user ran a malicious .exe file.
Which of the following prevented the AppLocker rules from being evaluated?
A) The Executable rules are enforced and not audited.
B) The Application Identity service is configured for Manual startup.
C) The Windows Installer rules are not configured.
D) A Path rule does not allow software to run from C:\Program Files\.

Question

Quizplus · Accepted Answer

The Application Identity service, which is responsible for determining and verifying the identity of an application, must be running for AppLocker rules to be evaluated. If it's set to Manual startup, it might not have been running at the time the malicious .exe was executed, thus preventing AppLocker rules from being evaluated.

Winona Has Set Up AppLocker Rules to Protect Computers on the Company