CompTIA SecurityX (CAS-005) CAS-005 — Question 151

A security engineer wants to enhance the security posture of end-user systems in a zero trust environment. Given the following requirements: • Reduce the ability for potentially compromised endpoints to contact C2 infrastructure. • Track the requests that the malware makes to the IPs. • Avoid the download of additional payloads. Which of the following should the engineer deploy to meet these requirements?