MCSA组策略问题

台湾服务器

question：
your network contains an AD domain named contoso.com.You have a GPO named gp1 that is linked to domain.GP1
contains a software restriction policy that blocks an application named App1.
you have a workgroup computer named computer1 that runs windows 8.A local group policy on computer1 contains an application control policy that allows App1.
You join computer1 to the domain.
You need to prevent App1 from running on computer1.
What should you do?
A. From computer 1,run gpupdate /force.
B. From group policy management ,add an application control policy to GP1.
C. From group policy management ,enable the enforced option on GP1.
D. In the local Group Policy of computer1,configure a software restriction policy.

求大神帮助，这个题选哪个啊？
我觉得是A啊，但是答案给了B，是不是答案错了。