Your network contains an Active Directory domain named contoso.com.
All servers run Windows Server 2012 R2.
An application named Appl.exe is installed on all client computers. Multiple versions of
Appl.exe are installed on different client computers. Appl.exe is digitally signed.
You need to ensure that only the latest version of Appl.exe can run on the client computers.
What should you create?

A.
an application control policy executable rule

B.
an application control policy Windows Installer rule

C.
an application control policy packaged app rule

D.
a software restriction policy certificate rule

Explanation:
You should apply an application control policy for executable rules, and it can be based on
version.
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 6: Create
and Manage Group Policy, Objective 6.2: Local Users and Groups, p. 329
http://technet.microsoft.com/en-us/library/dd759068.aspx
http://technet.microsoft.com/en-us/library/hh994588.aspx
http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-apps-in-windows-8-
using-grouppolicy/

http://technet.microsoft.com/en-us/library/hh994597.aspx#BKMK_Cert_Rules