On production-signed Windows Server 2025, a team wants to identify software impact while allowing execution. Which OSConfig App Control mode should be used first?

Choose the single best answer.

A.Credential Guard with UEFI lock
B.Audit mode
C.A firewall allow rule for the application
D.Enforcement mode

Show the answer and explanation

✓ Correct answer

Audit mode

Audit records would-block behavior without preventing code execution. Enforcement can disrupt unapproved software; a firewall rule controls traffic, and Credential Guard protects supported secrets rather than evaluating code trust.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.