3.4.8

Apply deny-by-exception (blacklisting) policy to prevent the use of unauthorized software or deny-all, permit-by-exception (whitelisting) policy to allow the execution of authorized software.实施基于异常拒绝（黑名单）策略，以预防未经授权软件的使用，或采用全面拒绝、基于异常许可（白名单）策略，以允许授权软件的执行。