A company recently experienced a security incident in which a USB drive containing malicious software was able to covertly install malware on a workstation. Which of the following actions should be ta

Installing a host-based IDS (HIDS) is a detection mechanism, not a preventative one for the initial infection vector described.

Restricting log-in times controls when users can access the system but does not prevent malware installation from a USB drive when they are logged in.

Enabling a BIOS password secures access to the BIOS/UEFI settings but does not prevent malware from running once the operating system has loaded.

Updating password complexity strengthens user authentication but does not prevent malware from being introduced or installed via a USB drive.

Disabling AutoRun (or AutoPlay) functionality prevents executable files or scripts on a USB drive from launching automatically when the device is connected, thereby stopping a common vector for malware execution.

Updating antivirus definitions helps detect known malware but doesn't prevent the initial execution or installation if the malware is new or sophisticated enough to evade detection.

Restricting user permissions, such as running user accounts with standard privileges instead of administrative rights, prevents users from installing unauthorized software or making system-wide changes, significantly limiting the impact of malware introduced via USB.