What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012. Server1 has the Remote Desktop Session Host role service installed.
The computer account of Server1 resides in an organizational unit (OU) named OU1.
You create and link a Group Policy object (GPO) named GPO1 to OU1. GPO1 is configured as shown in the
exhibit. (Click the Exhibit button.)

You need to prevent GPO1 from applying to your useraccount when you log on to Server1. GPO1 must apply
to every other user who logs on to Server1.
What should you configure?

A.
Item-level targeting

B.
Security Filtering

C.
Block Inheritance

D.
WMI Filtering

Explanation:
Security Filtering: Set Deny for Read and/or Apply Group Policy (AGP).
In order for the GPO to apply to a given user or computer, that user or computer must have both Read and
Apply Group Policy (AGP) permissions on the GPO, either explicitly, or effectively though group membership.
http://technet.microsoft.com/en-us/library/cc781988(v=ws.10).aspx