An administrator is tasked with reducing the malware infection rate of PC applications. To accomplish this, the administrator restricts the locations from which
programs can be launched. After this is complete, the administrator notices that malware continues to run from locations on the disk and infect the hosts. Which of
the following did the administrator forget to do?

A.
Restrict write access to the allowed executable paths

B.
Install the host-based intrusion detection system

C.
Configure browser sandboxing

D.
Disable unnecessary services