A legacy application used for a critical business function relies on software that has reached the end of extended support Which of the following is the MOST effective control to manage this…

Subscribing to threat intelligence helps in monitoring and awareness, but it does not directly mitigate the inherent vulnerabilities of an unpatched, end-of-life application.

The question states the software has reached the end of extended support, meaning new patches for that version are no longer available, rendering this option impossible or ineffective for the current version.

When a critical legacy application is unpatchable due to end-of-life software, network segmentation is the most effective control. By isolating the application within its own network segment (e.g., VLAN, dedicated firewall rules), you limit its exposure to external threats and prevent potential compromises from spreading to other systems, thereby containing the risk posed by its unpatched vulnerabilities.

Increasing backup frequency is a good recovery control against data loss, but it does not prevent the initial compromise or mitigate the vulnerabilities of an end-of-life application.