An administrator's company has recently had to reduce the number of Tier 3 help desk technicians available to support enterprise service requests. As a result, configuration standards have declined…

Network File System is a file sharing protocol, not a control that limits reconnaissance capability.

Disabling command execution prevents users from running reconnaissance tools such as netstat, ipconfig, or nmap that reveal network topology and open ports.

Port security controls which physical devices connect to switch ports and does not restrict what an already-connected authorized user can do on the network.

TLS encrypts data in transit but does not prevent an authorized user from querying network resources or running enumeration commands.

Search engine reconnaissance is an attack technique, not a security control.

NIDS detects suspicious network activity but does not actively prevent an authorized user from performing reconnaissance.

BIOS security prevents attackers from booting to external media or altering system startup configurations that could bypass OS-level restrictions.

HIDS detects unauthorized changes or suspicious activity on a host but does not proactively prevent a user from running reconnaissance commands.

Identity Management (IdM) enforces least-privilege access, ensuring users can only access resources necessary for their role, limiting lateral movement and information gathering.