What do Application Controls help manage on workstations and servers?

• A. They help control what types of applications can be installed; Application Allow/Block list.
• B. They detect and block threats in real time.
• C. They provide secure boot verification.
• D. They store cryptographic keys.

Answer: (A)

Application controls regulate what software can run on a workstation or server by using allow/deny lists to control what types of applications can be installed and executed. This whitelisting approach limits the attack surface by preventing unapproved or potentially malicious software from running, enforcing policy and compliance, and often using mechanisms like AppLocker or Software Restriction Policies.

Other options describe different security functions: real-time threat detection is about identifying and blocking threats as they appear, secure boot verification checks the integrity of the boot process, and storing cryptographic keys relates to key management. The primary role of application controls is precisely to govern which applications are allowed to be installed and run.