You have a computer that runs Windows 7. Your company has three custom applications named app1.exe, app2.exe, and app3.exe. The applications have been digitally signed by the company. You need to create a policy that allows only applications that have been digitally-signed by the company to run. What should you create?

A.
an AppLocker executable rule

B.
an AppLocker Windows Installer rule

C.
a software restriction policy and a certificate rule

D.
a software restriction policy and a hash rule