As the name suggests, these actions prevent the Deny File Access action prevents applications from reading or writing (or both) to certain directories or to Microsoft Office Documents.
To Deny Applications From Access
...
You can choose from two actions:
Deny Read/Write Access to Microsoft Office Documents - This action can be used to deny read and write access to Microsoft Office Documents.
Deny Write Access to Executable
...
Files - This action can be used to deny write access to common executable files.
...