What should you do?

You have a computer that runs Windows 7. You have an application control policy on the computer. You discover that the policy is not enforced on the computer. You open the Services snap-in as shown in the exhibit. (Click the Exhibit button.) You need to enforce the application control policy on the computer. What should you do?
Exhibit:

You have a computer that runs Windows 7. You have an application control policy on the computer. You discover that the policy is not enforced on the computer. You open the Services snap-in as shown in the exhibit. (Click the Exhibit button.) You need to enforce the application control policy on the computer. What should you do?

A.
Set the Application Identity service Startup Type to Automatic and start the service.

B.
Set the Application Information service Startup Type to Automatic and start the service.

C.
Set the Application Management service Startup Type to Automatic and start the service.

D.
Set the Application Experience service Startup Type to Automatic and start the service.

Explanation:
Application Identity service
AppLocker relies upon the Application Identity Service being active. When you install Windows 7, the startup type of this service is set to Manual. When testing AppLocker, you should keep the startup type as Manual in case you configure rules incorrectly. In that event, you can just reboot the computer and the AppLocker rules will no longer be in effect. Only when you are sure that your policies are applied correctly should you set the startup type of the Application Identity Service to Automatic. You should take great care in testing AppLocker rules because it is possible to lock down a computer running Windows 7 to such an extent that the computer becomes unusable. AppLocker policies are sometimes called application control policies.



Leave a Reply 0

Your email address will not be published. Required fields are marked *