CompTIA Security+ (SY0-701) SY0-701 — Question 482

An alert references attacks associated with a zero-day exploit. An analyst places a bastion host in the network to reduce the risk of the exploit. Which of the following types of controls is the analyst implementing?