Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016

HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

The services on Server1 are shown in the following output.

Server1 has the AppLocker rules configured as shown in the exhibit (Click the Exhibit button.)

Rule1 and Rule2 are configured a$ shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

View Answer

Answer:

Explanation:

On Server1, User1 can run D:\Folder2\App1.exe: Yes

On Server1, User1 can run D:\Folder1\Program1.exe: Yes

If Program1 is copied from D:\Folder1 to D:\Folder2, User1 can run Program1.exe on Server1: NO

https://docs.microsoft.com/en-us/windows/device-security/applocker/configure-the-application­identity-serviceThe Application Identity service determines and verifies the identity of an app. Stopping this service willprevent AppLocker policies from being enforced.In this question, Server1’s Application Identity service is stopped, therefore, no more enforcement onAppLocker rules, everyone could run everything on Server1.