You need to ensure that Windows updates are not automatically applied and cannot be enabled by users

A company has an Active Directory Domain Services (AD DS) domain. Client computers in
the Test department run Windows 8 and are connected to the domain.
You need to ensure that Windows updates are not automatically applied and cannot be
enabled by users.
What should you do?

A.
Create a Group Policy object (GPO) to enable the Turn on recommended updates via
Automatic Updates policy setting.

B.
Configure Windows Update to install updates automatically.

C.
Create a Group Policy object (GPO) to configure the Remove access to use all Windows
Update features policy setting.

D.
Create a Group Policy object (GPO) to configure the Configure Automatic Updates policy
setting.

Explanation:
Remove access to use all Windows Update features:
This Group Policy setting is located in User Configuration\Administrative
Templates\Windows Components\Windows Update.
When you enable this setting, the operating system cannot be updated through Windows
Update, and Automatic Updates is disabled. Users or administrators can still perform actions
such as clicking the Windows Update option on the Start menu, and the Windows Update
Web site will appear in the browser. However, it will not be possible to update the operating
system through Windows Update, regardless of the type of account being used to log on.