You have a deployment of System Center Configuration Manager (Current Branch) that contains a collection named Restricted. Restricted contains only client computers that run Windows 10.

You need to ensure that only t

rusted executable files can run on the computers in the Restricted collection.

What should you do?

A. Deploy custom Client Device Settings.

B. Create a Windows Defender Application Control (WDAC) policy.

C. Modify the Default Client Settings.

D. Create a

device compliancy policy.

References: https://docs.microsoft.com/en-us/sccm/protect/deploy-use/use-device-guard-with-configuration-manager