You administer Windows 10 Enterprise computers.
Users are able to download applications from the Internet and install them on their computers.
You need to ensure that users can install only digitally signed applications from approved publishers.
What should you do?
A.
Create AppLocker Publisher rules.
B.
Turn on Windows SmartScreen.
C.
Enable the Check for signatures on downloaded programs option.
D.
Add publishers’ websites to the Trusted Sites zone.
A seems correct.
https://docs.microsoft.com/en-us/windows/device-security/applocker/understanding-the-publisher-rule-condition-in-applocker