A. Yes, you can create user groups which are allowed to only browse a certain sites. To do that, create groups with a Site policy as 'Default Block'. This can be done in the group creation form.