A technician is setting up a new laptop. The company's security policy states that users cannot install virtual machines. Which of the following should the technician implement to prevent users from…

A UEFI (Unified Extensible Firmware Interface) password, often referred to as a BIOS password, protects access to the system's firmware settings. Disabling virtualization technology features (like Intel VT-x or AMD-V) within the UEFI/BIOS and then setting an administrator password will prevent users from re-enabling them without the password.

Secure Boot is a UEFI feature that ensures only signed, trusted operating system loaders can execute, but it does not directly control access to or prevent the enabling of virtualization technology.

Account lockout is an operating system security feature that prevents unauthorized access by locking an account after multiple failed login attempts; it does not control hardware virtualization settings.

Disabling network drivers would prevent network connectivity but has no bearing on the ability to enable or disable virtualization technology in the system firmware.