The Chief Information Officer (CIO) for a Large Manufacturing Organization

The Chief Information Officer (CIO) for a large manufacturing organization has noticed a significant number of unknown devices with possible malware infections are on the organization's corporate network. Which of the following would work BEST to prevent the issue?

A) Reconfigure the NAC solution to prevent access based on a full device profile and ensure antivirus is installed.
B) Segment the network to isolate all systems that contain highly sensitive information, such as intellectual property.
C) Implement certificate validation on the VPN to ensure only employees with the certificate can access the company network.
D) Update the antivirus configuration to enable behavioral and real-time analysis on all systems within the network.