It picks the minimum compatible version found scanning PATH by default. You can control the scan though with

[python-setup] interpreter-search-paths

which is a list. If you have locked down machines, this can be a useful option to control exactly the python interpreter picked.