A security administrator has noticed that an increased number of employees’ workstations are becoming
infected with malware. The company deploys an enterprise antivirus system as well as a web content filter,
which blocks access to malicious web sites where malware files can be downloaded. Additionally, the company
implements technical measures to disable external storage. Which of the following is a technical control that the
security administrator should implement next to reduce malware infection?

A.
Implement an Acceptable Use Policy which addresses malware downloads.

B.
Deploy a network access control system with a persistent agent.

C.
Enforce mandatory security awareness training for all employees and contractors.

D.
Block cloud-based storage software on the company network.