CompTIA CySA+ (CS0-003) CS0-003 — Question 2

An analyst wants to ensure that users only leverage web-based software that has been pre-approved by the organization. Which of the following should be deployed?