During a recent audit, several undocumented and unpatched devices were discovered on the internal network. Which of the following can be done to prevent similar occurrences?

• Run weekly vulnerability scans and remediate any missing patches on all company devices

• Implement rogue system detection and configure automated alerts for new devices

• Install DLP controls and prevent the use of USB drives on devices

• Configure the WAPs to use NAC and refuse connections that do not pass the health check