Which of the following best represents the CDM capability: What's on the Network?

$1.$

Limit, prevent, and$/$or remove unauthorized network connections that allow attackers to cross internal and external network boundaries and pivot to gain deeper network access.

$2.$

Establish a coordinated effort that applies to an entity $($including a non$-$person entity$)$ that access any resource, physical or logical$,$ in an organization.

$3.$

Move beyond asset management to an extensive and dynamic monitoring of security controls.

$4.$

Establish the scope $/$ authorization boundary by capturing the entire digital attack surface.