Explanation:
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/gateway
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure- monitor

Windows Server, File Screening Management
On the File Screening Management node of the File Server Resource Manager MMC snap-in, you can perform the following tasks:
*-> Create file screens to control the types of files that users can save, and generate notifications when users attempt to save unauthorized files.
Define file screening templates that can be applied to new volumes or folders and that can be used across an organization.
Create file screening exceptions that extend the flexibility of the file screening rules.
To create a File Screen with custom properties
1. In File Screening Management, click the File Screens node.
2. Right-click File Screens, and click Create File Screen (or select Create File Screen from the Actions pane). This opens the Create File Screen dialog box.
3. Under File screen path, type the name of or browse to the folder that the file screen will apply to. The file screen will apply to the selected folder and all of its subfolders. [Here:
\\SRV1\Data]
4. Under How do you want to configure file screen properties, click Define custom file screen properties, and then click Custom Properties. This opens the File Screen Properties dialog box.
5. If you want to copy the properties of an existing template to use as a base for your file screen, select a template from the Copy properties from template drop-down list. Then click Copy.
In the File Screen Properties dialog box, modify or set the following values on the Settings tab:
6. Under Screening type, click the Active screening [Here Active] or Passive screening option.
(Active screening prevents users from saving files that are members of blocked file groups and generates notifications when users try to save unauthorized files. Passive screening sends configured notifications, but it does not prevent users from saving files.)
7. Under File groups, select each file group that you want to include in your file screen. (To select the check box for the file group, double-click the file group label.) [Here choose exe/executables]
8. If you want to view the file types that a file group includes and excludes, click the file group label, and then click Edit. To create a new file group, click Create.
9. Additionally, you can configure File Server Resource Manager to generate one or more notifications by setting options on the E-mail Message, Event Log, Command, and Report tabs. For more information about file screen notification options, see Create a File Screen Template.
10.After you have selected all the file screen properties that you want to use, click OK to close the File Screen Properties dialog box.
11.In the Create File Screen dialog box, click Create to save the file screen. This opens the Save Custom Properties as a Template dialog box.
12.Select the type of custom file screen you want to create:
13.To save a template that is based on these customized properties (recommended), click Save the custom properties as a template and enter a name for the template. This option will apply the template to the new file screen, and you can use the template to create additional file screens in the future. This will enable you to later update the file screens automatically by updating the template.
14.If you do not want to save a template when you save the file screen, click Save the custom file screen without creating a template.
15.Click OK.
Reference:
https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-screen

Set-ADUser is used to make changes to the data associated with a resource, such as a user or a file property. Therefore, in the given scenario, being the administrator you need to use Set- ADuser PowerShell cmdlet to reconfigure the properties of some users in the Sales organization unit of the fabrikam.com domain.
Reference:
https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-aduser

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-
2012/dn789189(v=ws.11)#operating-system-targeting