HOTSPOT
Your network contains an Active Directory domain.
The Default Domain Policy contains the AppLocker settings configured as shown in the
AppLocker Settings exhibit. (Click the Exhibit button.)
The Default Domain Policy contains the AppLocker properties configured as shown in the
AppLocker Properties exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Each correct selection is worth one point.
Answer: 
Since none of the rules are enforced, app1.exe will run.
denying app1.exe by using applocker’s executable rule.
https://technet.microsoft.com/en-us/library/ee449488.aspx?f=255&MSPPError=-2147217396
“By default, if enforcement is not configured and rules are present in a rule collection, those rules are enforced.”
Nice find Renato, thank you.
Just to add to Renato’s correct link, here is the 2012 R2 link to the same information: https://technet.microsoft.com/en-us/library/ee449488.aspx
Also, the supplied answer is incorrect.
First option should be “Denied for everyone”.
The second option is still correct: “an Executable”