Esmeralda Creates a Rule with the Deny Permission for Photo

Multiple Choice

Esmeralda creates a rule with the Deny permission for photo.exe in the Executable Rules collection for a group with all users.
Which of the following is true in this scenario?

A) This rule is not enabled by default due to negative performance impact.
B) This rule can also be applied to multiple users or groups.
C) Users will not be able to run other applications that do not have an Allow rule.
D) Users who have the Allow permission for photo.exe will be able to run the executable.