Configuring Symantec Endpoint Protection according to hash, file path, parent folder and digital signature

Hi, 

I am trying to figure out the ways to configure application whitelists using Symantec Endpoint Protection (I haven't purchased the product yet).

Am I able to whitelist applications according to their 1) Hash 2) Executable absolute path 3) Parent folder 4) Digital Signature?

I have another question which is much less important  - does Symantec offer any endpoint comparison services?

Thankyou - 

Kimberley