You have a Windows 7 computer that is a member of a workgroup. You need to prevent members of a localgroup from starting a specific application. You must achieve this goal by using the minimum amount ofadministrative effort. 
What should you create?（）

单项选择题You have a computer that runs Windows 7. You have an application control policy on the computer. Youdiscover that the policy is not enforced on the computer. You open the Services snap-in as shown in theexhibit. (Click the Exhibit button.) You need to enforce the application control policy on the computer. What should you do?（）

A.Set the Application Identity service Startup Type to Automatic and start the service.
B.Set the Application Information service Startup Type to Automatic and start the service.
C.Set the Application Management service Startup Type to Automatic and start the service.
D.Set the Application Experience service Startup Type to Automatic and start the service.

单项选择题You have a computer that runs Windows 7. You have a third-party application. You need to ensure that onlya specific version of the application runs on the computer. The solution must ensure that all applicationrestrictions are based on the application vendor s digital signature.  What should you do?（）

A.From Application Control Policies， configure a path rule.
B.From Application Control Policies， configure a publisher rule.
C.From Software Restriction Policies， configure a path rule.
D.From Software Restriction Policies， configure a certificate rule.

单项选择题You have a computer that runs Windows 7. Multiple users log on to the computer. The computer has fiveremovable devices. You need to ensure that users can only access removable  devices that have beenpreviously installed on the computer.  What should you modify in the Local Group Policy ?（）

A.Enable the Prevent redirection of USB devices setting.
B.Enable the Prevent installation of removable devices setting.
C.Disable the WPD Devices： Deny read access setting.
D.Disable the Allow administrators to override Device Installation Restriction policies setting.

单项选择题You have a stand-alone computer named Computer1 that runs Windows 7. Several users share Computer1. You need to prevent all users who are members of a group named Group1 from runningWindows Media Player. All other users must be allowed to run Windows Media Player. You must achievethis goal by using the least amount of administrative effort.  What should you do?（）

A.From Software Restriction Policies， create a path rule.
B.From Software Restriction Policies， create a hash rule.
C.From Application Control Policies， create the default rules.
D.From Application Control Policies， create an executable rule.

单项选择题You have a computer that runs Windows 7. You have an application installation package named app1.msi.You need to perform a customized installation of app1.msi.  What should you do?（）

A.Create a transform file named app1.mst and then run Msiexec.exe /i app1.msi /t app1.mst.
B.Create a transform file named app1.mst and then run Msinfo32.exe /i app1.msi /t app1.mst.
C.Create an update file named app1.msp and then run Msiexec.exe /i app1.msi /update app1.msp.
D.Create an update file named app1.msp and then run Msinfo32.exe /i app1.msi /update app1.msp.