Which of the following is the BEST method for ensuring there is no Telnet access?

A network sniffer can detect Telnet traffic if it is occurring, but it does not actively prevent or block Telnet access; it is a monitoring tool.

An intrusion detection system (IDS) detects suspicious activity or policy violations and alerts administrators, but it does not inherently prevent or block Telnet access itself; it is a reactive monitoring system.

Antivirus software protects against malicious software like viruses and malware, but it is not designed to control or block specific network protocols like Telnet.

A host-based firewall is a software application that monitors and controls incoming and outgoing network traffic on a single device, typically based on predefined security rules. By configuring the host-based firewall to explicitly deny traffic on TCP port 23 (Telnet's default port), you can effectively prevent any Telnet access to or from that specific host.