Which of the following features of Windows 7 allows an administrator to both passively review installed software and configure policies to prevent out-of-date or insecure software from running?

Direct Access is a remote connectivity feature that allows domain-joined clients to connect to internal resources without a VPN, and has no application control or software review functionality.

Software Restriction Policies is an older mechanism that can block software by path or hash, but lacks AppLocker's auditing and publisher-based rules, and does not support the passive review mode described.

AppLocker allows administrators to create allow/deny rules based on publisher, path, or file hash, enabling both passive auditing mode (to inventory what runs) and enforced policy mode (to block out-of-date or insecure software). It supersedes Software Restriction Policies and integrates with Group Policy for enterprise-wide enforcement. Its audit-only mode is specifically designed for the passive review use case described in the question.

User Account Control prompts for elevation of privilege when administrative actions are attempted, but it does not inventory installed software or enforce policies against specific applications running.