Which of the following is a deployment concept that can be used to ensure only the required OS access is exposed to software applications?

A staging environment is used for testing software releases in a production-like setting before deployment, not primarily for controlling or restricting application access to the operating system.

Sandboxing creates a highly controlled, isolated environment where software applications can execute with restricted permissions, exposing only the specific OS access required for their function. This containment prevents applications from interacting with unauthorized system resources or potentially malicious actions from affecting the host operating system.

A secure baseline is a set of minimum security configurations and best practices applied to systems, which is about initial hardening rather than a deployment concept for isolating application OS access.

A trusted OS refers to an operating system designed with enhanced security features and formal verification, but it is a type of OS rather than a specific deployment concept for isolating individual application access.