You have a deployment of Microsoft a System Center 2012 R2 Configuration Manager. All client computers
have the Configuration Manager client installed.
You need to ensure that only the client computers in a branch office have Configuration Manager Endpoint
Protection settings configured to scan all of the email messages on the computers.
What should you configure first?

A.
the scan settings of a new antimalware policy

B.
the real-time protection settings of a new antimalware policy

C.
the exclusion settings of the Default Antimalware Policy

D.
the default actions of the Default Antimalware Policy

Explanation:
http://gerryhampsoncm.blogspot.co.uk/2013/08/config-mgr-2012-endpoint-protection.html