Exam 70-744 topic 1 question 23 discussion

Answer should be Yes, Yes, Yes. If the Application Identity service is stopped, AppLocker policies are not enforced

All is Yes so answer is incorrect

My Answer is Yes / No / No AppLocker rule collection functions as an allowed list of files. This block by default, allow by exception configuration makes it easier to determine what will occur when an AppLocker rule is applied. The deny action will take precedence over any allow action, regardless of which Group Policy Object (GPO) the rule was originally applied in. https://docs.microsoft.com/zh-tw/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-applocker-allow-and-deny-actions-on-rules

Agree with yes, yes, yes

Yes, Yes, Yes https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/configure-the-application-identity-service

Yes, agree with these comments. The Application Identity service determines and verifies the identity of an app. Stopping this service will prevent AppLocker policies from being enforced. https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/configure-the-application-identity-service

Answer should be Yes, Yes, Yes.

Yes, Yes, Yes