CompTIA SecurityX (CAS-005) CAS-005 — Question 109

A company acquires a location with a large infrastructure of legacy devices. Because of the hardware's age and the legacy software's limitations, the OS cannot be upgraded, and the machines cannot be virtualized. These machines are not publicly facing, but they do have internet access. The following controls are currently in place: • EDR • Anti-malware • Logging and monitoring • Host-based firewall • Proxied internet access A security architect needs to supplement the existing control strategy with one that restricts unauthorized software. Which of the following controls should the architect recommend to best supplement the existing environment?