What should you do?

You work as the network administrator at Domain.com. The Domain.com network consists of a single Active Directory domain named Domain.com. Domain.com has its headquarters located in London and branch office located in Paris. All servers on the Domain.com network run Windows Server 2008 and all client computers run Windows Vista.
Domain.com has recently created an organizational unit named KingProducts which has a child organizational object named KingSales. Domain.com has additionally created a GPO named Sales Application and linked it to the KingProducts OU. During the course of the day you receive instruction from Domain.com to create a shadow group for the KingSales organizational unit whilst ensuring that the SalesApplication is not deployed to network users in the KingSales OU.
What should you do? (Choose two)

A.
You should consider having the Block Inheritance setting configured on the KingSales organizational unit.

B.
You should consider having security filtering configured on the SalesApplication GPO to Deny.

C.
You should consider having the Enforce setting configured on the SalesApplication GPO.

D.
You should consider having the Block Inheritance setting configured on the KingProducts organizational unit.

Explanation:
You should then have the group policy applied for the KingSales OU.