What should you do?

Topic 1, Manage identity

You support Windows 10 Enterprise computers that are members of an Active Directory domain. Your company policy defines the list of approved Windows Store apps that are allowed for download and installation.

You have created a new AppLocker Packaged Apps policy to help enforce the company policy.

You need to test the new AppLocker Packaged Apps policy before you implement it for the entire company.

What should you do?
A . From Group Policy, enforce the new AppLocker policy in Audit Only mode.
B . From Group Policy, run the Group Policy Results Wizard.
C . From Group Policy, run the Group Policy Modeling Wizard.
D . From PowerShell, run the Get-AppLockerPolicy CEffective command to retrieve the AppLocker effective policy.

View Answer

Answer: A

Explanation:

You can test an AppLocker Packaged Apps policy by running it in audit mode.

After AppLocker rules are created within the rule collection, you can configure the enforcement setting to Enforce rules or Audit only.

When AppLocker policy enforcement is set to Enforce rules, rules are enforced for the rule collection and all events are audited. When AppLocker policy enforcement is set to Audit only, rules are only evaluated but all events generated from that evaluation are written to the AppLocker log.