A company has had several malware incidents that have been traced back to users accessing personal SaaS applications on the internet from the company network. The company has a

policy that states users can only access business$-$related cloud applications from within the company network. Which of the following technical solutions should be used to enforce the

policy?

A$.$ Implement single sign$-$on using an identity provider.

B$.$ Leverage a cloud access security broker.

C$.$ Configure cloud security groups.

D$.$ Install a virtual private cloud endpoint.