Your network contains an Active Directory domain. All client computers run Windows 8.1 Enterprise.
Microsoft System Center 2012 Endpoint Protection is deployed to all of the computers by using the default
settings contained in the Default Antimalware Policy.
The users in the research department report that a folder named C:\TestApp must not be scanned by the
Endpoint Protection client.
You need to configure the Endpoint Protection client not to scan the C:\TestApp folder for the computers in
the research department only.
What should you do first?

A.
In the Endpoint Protection client, modify the Excluded files and locations setting for each research
department computer.

B.
Create a new antimalware policy and modify the Threat overrides settings.

C.
Create a new antimalware policy and modify the Exclusion settings.

D.
In the Default Antimalware Policy, modify the Exclusion settings.

Explanation:
http://technet.microsoft.com/en-us/library/hh508785.aspx