In macOS, the "Privacy" settings under "Security & Privacy" are where users can control which applications are allowed to run, including third-party apps. By default, macOS may restrict apps that are not downloaded from the App Store, but in the Privacy settings, users can enable installations from identified developers or even from any source. The other options like "Keychain" manage passwords and certificates, "Accessibility" deals with assistive technologies, and "Spotlight" is the search feature.
References:
Apple Support: Safely open apps on your Mac
CompTIA A+ 220-1102 Study Guide (Whizlabs)

In change management, the scope of a project lists all the changes that are taking place. The scope ensures that all team members understand the boundaries and extent of the project, helping to prevent unexpected changes. Here's a
* Scope: Defines the project's boundaries and deliverables, including all the planned changes. It ensures that everyone involved understands what is included and excluded in the project, minimizing unexpected changes.
* Risk analysis: Identifies potential risks and their impact but does not list the changes.
* Rollback plan: Provides a strategy for reverting changes if something goes wrong but does not list changes.
* Review: Involves evaluating changes but does not compile the list of changes.
Reference:
CompTIA A+ 220-1102 Exam Objectives, Section 4.2: Explain basic change-management best practices.
Change management documentation.

AutoRun is a feature of Windows that automatically executes a program or file when a removable media such as a USB drive is inserted into the computer. Disabling AutoRun can prevent a USB drive containing malicious software from covertly installing malware on a workstation, as it would require the user to manually open the drive and run the file. Restricting user permissions can also prevent a USB drive containing malicious software from covertly installing malware on a workstation, as it would limit the user's ability to execute or install unauthorized programs or files. Installing a host-based IDS, restricting log-in times, enabling a BIOS password, updating the password complexity, and updating the antivirus definitions are not actions that can directly prevent this incident from happening again.

Windows 10 Enterprise is an edition of Windows 10 that is designed for large organizations that need advanced security and management features. Windows 10 Enterprise can be activated using different methods, such as Multiple Activation Key (MAK), Active Directory-based Activation (ADBA), or Key Management Service (KMS)1. KMS is a method of activation that uses a local server to activate multiple devices on a network. KMS activations are valid for 180 days and need to be renewed periodically by connecting to the KMS server2. If a device does not renew its activation within 180 days, it will enter a grace period of 30 days, after which it will display a warning message and lose some functionality until it is reactivated3. The other editions of Windows 10 do not require reactivation every 180 days. Windows 10 Pro for Workstation is an edition of Windows 10 that is designed for high-performance devices that need advanced features such as ReFS file system, persistent memory, and faster file sharing. Windows 10 Pro for Workstation can be activated using a digital license or a product key. Windows 10 Home is an edition of Windows 10 that is designed for personal or home use. Windows 10 Home can be activated using a digital license or a product key. Windows 10 Pro is an edition of Windows 10 that is designed for business or professional use. Windows 10 Pro can be activated using a digital license or a product key. None of these editions require reactivation every 180 days unless there are significant hardware changes or other issues that affect the activation status.

Rootkits are particularly dangerous because they modify the operating system to hide their presence and can disable antivirus software like Windows Defender. Ransomware (A) encrypts files, but usually does not disable antivirus software. Spyware (C) and Keyloggers (D) typically do not directly disable antivirus programs either.
Reference: Core 2, Domain 2.3 - Malware types and impacts.