SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-application-allow-list

A list of applications authorized to run, with everything else blocked by default, is called what?

Application allow list, only approved software may run.

Start playing free

  1. An application allow list ✔
  2. A certificate revocation list
  3. A deny list of known malware

Why: Default-deny stops unknown programs, including new malware, from running at all. It works best on managed machines where users cannot install software.

Huh, didn't know that: NIST says application whitelisting suits managed hosts, such as a kiosk limited to a web browser.

The dad joke
The allow list is the bouncer who only lets in people with names on the sheet.
Like this card?
Play the game

References

Answer: An application allow list. Default-deny stops unknown programs, including new malware, from running at all. It works best on managed machines where users cannot install software.

  1. NIST SP 800-167, Guide to Application Whitelisting nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-167.pdf
    An application whitelist is a list of applications and application components that are authorized for use in an organization.
    Checked 2026-10-10.
  2. NIST SP 800-167, Guide to Application Whitelisting nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-167.pdf
    An example is a kiosk workstation where users are limited to running a web browser
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyGiving each user only the access needed for their assigned tasks follows which principle?Security & PrivacyWhich hardening step reduces the attack surface by removing what a system does not need?Security & PrivacyWhich control limits how many failed login attempts can be made on an account?

That's stuff everyone should know.