HOTSPOT
Your network contains an Active Directory domain named contoso.com. Computer accounts for the marketing department are in an organizational unit (OU) named DepartmentsMarketingComputers. User accounts for the marketing department are in an OU named DepartmentsMarketingUsers.
Marketing users can only log on to the client computers in the DepartmentsMarketingComputers OU.
You need to apply an application control policy to all of the marketing users.
Which Group Policy Object (GPO) should you configure? To answer, select the appropriate GPO in the answer area.
Answer: 
Explanation:
Application control policies specify which programs are allowed to run on the local computer and which are not.
References:
http://technet.microsoft.com/en-us/library/hh125923(v=ws.10).aspx
http://technet . microsoft .com /en-us/library/cc781458(v=WS . 10) . aspx
http://technet . microsoft .com /en-us/library/hh967461 . aspx
http://technet . microsoft .com /en-us/library/ee461050 . aspx
http://technet . microsoft .com /en-us/library/ee461044 . aspx