QuestionQ74

Managing browsers and endpoints

The organization’s security team has published a list of approved third-party apps and extensions that employees may use. Every other app is prohibited unless a business case is submitted and approved. The Chrome Web Store policy at the top-level organization currently allows all apps and extensions while an administrator maintains a blocklist.

You must disable any unapproved apps that are already installed and prevent employees from installing unapproved apps. What should you do?

  • A Change the Chrome Web Store allow/block mode setting to allow all apps, admin manages blocklist, In the App access control card, block any existing web app that is not on the security team’s vetted list.
  • B Change the Chrome Web Store allow/block mode setting to block all apps, admin manages allowlist. Add the apps on the security team’s vetted list to the allowlist.
  • C Disable Extensions and Chrome packaged apps as Allowed types of apps and extensions for the top-level organizational unit. Selectively enable the appropriate extension types for each suborganization
  • D Disable the Chrome Web Store service for the top-level organizational unit. Enable the Chrome Web Store service for organizations that require Chrome apps and extensions.
Explanation

Chrome Web Store’s Block all apps, admin manages allowlist mode permits users to install only apps and extensions that the administrator has explicitly allowlisted. Adding the security team’s vetted items to that allowlist blocks all unapproved items by default, satisfying both the existing-installation and future-installation restrictions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!