Your network contains an Active Directory domain named adatum.com. The domain
contains a server named Server1 that runs Windows Server 2012. You need to prevent all of
the applications that run on Server1 from running code from nonexecutable memory regions.
What should you do?

A.
From the local Group Policy, create an application control policy.

B.
From BCDEdit, modify the Data Execution Prevention (DEP) settings.

C.
From Windows PowerShell, run the Set-ExecutionPolicy cmdlet.

D.
From the local Group Policy, create a software restriction policy.