A whitelist is a list of approved or trusted entities that are explicitly permitted access or privileges, while anything not on the list is denied by default.