HOTSPOT
Your network contains an Active Directory forest. The forest contains a single domain named contoso.com.
AppLocker policies are enforced on all member servers.
You view the AppLocker policy applied to the member servers as shown in the exhibit. (Click the Exhibit
button.)
Use the drop-down menus to select the answer choice that completes Each statements. Each correct selection
is worth one point.
Hot Area:
Answer: 
I feel “only local users” is the right answer for exhibit 1.
Explanation – Every domain admin is a domain user and there is an explicit deny for all the domain users. So domain admins too can’t open an iexplore file.