HOTSPOT
Your network contains an Active Directory forest. The forest contains a single domain named
contoso.com.
AppLocker policies are enforced on all member servers.
You view the AppLocker policy applied to the member servers as shown in the exhibit. (Click the
Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit. Each
correct selection is worth one point.
Answer: 
Explanation:
First answer is wrong.
Domain Admins is part of Domain Users group by default.
There’s a deny on Domain Users. Deny takes precedence.
Answer should be Local Admins (since no GPOs apply to local users as they’re not part of the domain).
Agreed, except it’s not just limited to local admins as the 3rd and 8th rules give all local users access.
So answer should be:
1. only local users
2. everyone
http://www.examcollections.info/tag/70-410-exam-dumps
There are to key concepts here:
1. Deny takes precedence
2. No priorities , meaning “publisher over path”