HOTSPOT
Your network contains an Active Directory domain. The domain contains a server named Server28.
The computer account of Server 28 is located in an organizational unit (OU) named OU1. A Group
Policy object (GPO) named Application Restriction Policy is linked to OU1.
The settings of the GPO are configured as shown in the GPO Settings exhibit. (Click the Exhibit
button.)
The Services console on Server28 is shown in the Services exhibit. (Click the Exhibit button.)
Select Yes if the statement can be shown to be true based on the available information; otherwise
select No. Each correct selection is worth one point.
Answer: 
Path of policy = %OSDRIVE%\App1\App1.exe
It’s not %programfiles%…
So Y, Y, Y, ?
I agree
I Agree yyn
agree
Y,Y,Y
Actually it is Y N Y
Explanation”
Can group1 members run app1.exe in program files?
Yes because everyone can.
Can group1 members run regedt32 in the system root folder?
Nope, only the administrators can run applications in that folder. As that is only allow for administrators.
Can administrators run regedt32 in the system root folders?
Yes.
Can group1 members run app1.exe in program files?
No because group1 has a deny which oversubscribes the allow action.