You have a deployment of System Center Configuration Manager (Current Branch) that contains a collection named Restricted. Restricted contains only client computers that run Windows 10.
You need to ensure that only trusted executable files can run on the computers in the Restricted collection.
What should you do?
A . Deploy custom Client Device Settings.
B . Create a Windows Defender Application Control (WDAC) policy.
C . Modify the Default Client Settings.
D . Create a device compliancy policy.
Answer: B
Explanation:
References: https://docs.microsoft.com/en-us/sccm/protect/deploy-use/use-device-guard-with-configuration-manager