Microsoft MCITP Test Prep - WIndows 7 Client

Answer - C - You should use the Publisher rules to block all applications that are created by a specific software vendor.

Key Takeaway: AppLocker provides two rule actions: allow and deny. Allow action on rules limits the execution of applications to an allowed list of applications and blocks everything else. Deny action allows the execution of any application except those on a list of denied applications. AppLocker introduces publisher rules that are based upon application digital signatures. You can restrict the execution of a program cased on the publisher, product name, file name, or the file version.