You need to ensure that members of the R&D group are not allowed to upgrade the software

All client computers on your company network run Windows 7 and are members of a Windows
Server 2008 R2 domain. The R&D department staffs are local administrators on their computers and
are members of the R&D global security group. A new version of a business software application is
available on the network. You plan to apply an AppLocker security policy to the R&D group. You
need to ensure that members of the R&D group are not allowed to upgrade the software. What
should you do?

A.
Create an Audit only restriction based on the version of the software.

B.
Create an Audit only restriction based on the publisher of the software.

C.
Create an Enforce rule restriction based on the version of the software.

D.
Create an Enforce rule restriction based on the publisher of the software.

Explanation:

http://technet.microsoft.com/en-us/library/ee619725(WS.10).aspx
http://sourcedaddy.com/windows-7/applocker-rule-types.html