You need to ensure that Computer1 can connect to File Transfer Protocol (FTP) servers only while it is connected to a private network

You have a computer named Computer1 that runs Windows 7.
You need to ensure that Computer1 can connect to File Transfer Protocol (FTP) servers only while it
is connected to a private network.
What should you do?

A.
From Windows Firewall with Advanced Security, create a new rule.

B.
From the local Group Policy, modify the application control policies.

C.
From Windows Firewall, modify the Allowed Programs and Features list.

D.
From Network and Sharing Center, modify the Advanced Sharing settings.

Explanation:
Creating WFAS Rules

The process for configuring inbound rules and outbound rules is essentially the same: In the WFAS
console, select the node that represents the type of rule that you want to create and then click New
Rule. This opens the New Inbound (or Outbound) Rule Wizard. The first page, shown in Figure 7-7,
allows you to specify the type of rule that you are going to create. You can select between a
program, port, predefined, or custom rule. The program and predefined rules are similar to what
you can create using Windows Firewall. A custom rule allows you to configure a rule based on
criteria not covered by any of the other options. You would create a custom rule if you wanted a rule
that applied to a particular service rather than a program or port. You can also use a custom rule if
you want to create a rule that involves both a specific program and a set of ports. For example, if you
wanted to allow communication to a specific program on a certain port but not other ports, you
would create a custom rule.