The correct configuration for deploying a QoS policy named 'App-police' with a police rate and burst of 1000000, and the action to drop traffic that exceeds these parameters, would typically involve defining data policies correctly. Option B shows a configuration that includes setting the policy name, applying it to a specific VPN list using sequence and action commands, and specifying the policer 'App-police'. This matches the requirements given: setting the policy name 'App-police', defining its police rate and burst, and specifying the exceed action as drop. Other options either do not fully implement these requirements or are missing specific configuration steps.