A company wants to secure a newly developed application that is used to access sensitive information and data from corporate resources. The application was developed by a third-party organization and it is now being used heavily despite lacking the following controls: -certificate pinning -Tokenization -Biometric authentication The company has already implemented the following controls: -Full device encryption -Screen lock -Device password -Remote wipe The company wants to defend against insert interception of data attacks. which of the following compensation controls should the company implement next? A. Enforce the use a VPN while using newly developed application B. Implement Geo fencing solution that disables application according to the company requirements C. Implement out of band second factor to authenticate authorize users D. Install the application in a secure container requiring additional authentication controls