A company is allowing a BYOD policy for its staff. Which of the following is a best practice that can decrease the risk of users jailbreaking mobile devices?

Corporately monitored mobile antivirus, often integrated with Mobile Threat Defense (MTD) solutions, includes jailbreak/root detection capabilities, allowing the organization to identify compromised devices and enforce policies, thereby mitigating the risk associated with jailbroken BYOD devices.

Preventing third-party app installations is a security measure often circumvented by jailbreaking, but it does not prevent the act of jailbreaking itself, which grants users root access to bypass such restrictions.

Building custom ROMs is not a practical or enforceable solution for a BYOD policy, as companies cannot dictate operating system modifications on personal devices.

Requiring digitally signed applications ensures app integrity but does not prevent users from jailbreaking their devices to bypass signature checks or install unsigned software.