Your network contains an Active Directory domain named contoso.com.
You need to prevent users from installing a Windows Store app named App1.
What should you create?

A.
An application control policy executable rule

B.
An application control policy packaged app rule

C.
A software restriction policy certificate rule

D.
An application control policy Windows Installer rule

Explanation:
Windows 8 is coming REALLY SOON and of course one of the big new things to computer with that is
the new Packaged Apps that run in the start screen. However these apps are very different and do
not install like traditional apps to a path or have a true “executable” file to launch the program. Of
course enterprises need a way to control these packaged apps and therefore Microsoft has added a
new feature Packaged Apps option to the App1ocker feature.
A)
For .exe or .com
B)
A publisher rule for a Packaged app is based on publisher, name and version
C)
You can create a certificate rule that identifies software and then allows or does not allow the
software to run, depending on the security level.
D)
For .msi or .msp
Packaged apps (also known as Windows 8 apps) are new to Windows Server 2012 R2 and Windows
8. They are based on the new app model that ensures that all the files within an app package share
the same identity.
Therefore, it is possible to control the entire Application using a single App1ocker rule as opposed to
the non-packaged apps where each file within the app could have a unique identity. Windows does
not support unsigned packaged apps which implies all packaged apps must be signed. App1ocker
supports only publisher rules for Packaged apps. A publisher rule for a packaged app is based on the
following information:
Publisher of the package
Package name
Package version
Therefore, an App1ocker rule for a Packaged app controls both the installation as well as the running
of the app. Otherwise, the publisher rules for Packaged apps are no different than the rest of the
rule collections; they support exceptions, can be increased or decreased in scope, and can be
assigned to users and groups.