A security tool relies on a specific version of libssl. Which of the following would an administrator implement to prevent libssM 0 0 from being upgraded?

'apt-mark hold libssl1.0.0' marks the specified package as held, instructing apt and related tools to skip it during all upgrade operations. This ensures the security tool continues to use the exact libssl version it was built against without risk of an incompatible upgrade breaking it. The hold state persists until explicitly reversed with 'apt-mark unhold libssl1.0.0'.

The 'yum --exclude' option is for RPM-based distributions such as RHEL or CentOS and is not valid on Debian/Ubuntu systems that use apt; the syntax shown is also malformed.

'apt ignore auto' is not a valid apt command or recognized option and would produce an error if executed.

'apt-get exclude' is not a valid apt-get subcommand or flag; no such exclude option exists in apt-get's interface.