By default it runs from the first option ticked, however that effectivity isn't convincing that you're protected at all. So with the use of EMET from Microsoft, that should enhance more mitigations techniques and prevent any exploits attacked; usually those cases are not so easily see by our naked eye and those process occur within split seconds.
+ Considering opening or browsing unusual files/sites then exploits may occur at high chance.