A security team wants to implement compliance controls that only permits the installation of company-approved...

Mobile Device Management (MDM) allows IT departments to enforce compliance controls, such as restricting the installation of unapproved software, on laptops and mobile devices.

Why Not A (EDR): Endpoint Detection and Response focuses on detecting and mitigating security threats, not compliance controls.

Why Not B (VPN): Virtual Private Networks provide secure connections but do not enforce software installation policies.

Why Not D (SaaS): Software as a Service refers to software delivery models and does not enforce compliance controls.

CompTIA A+ Exam Reference: Core 2 (220-1102), Section 2.7, device management and security​.