A software development company needs to augment staff by hiring consultants for a high-stakes project. The project has the following requirements

• Consultants will have access to highly confidential proprietary data

• Consultants will not be provided with a company owned assets

• work needs to start immediately

• Consultants will be provided with internal email addresses for communications

which of the following Solutions is the best method for controlling data exfiltration during the project?

1. require that all Consultants actively be restricted to a secure vdi environment

2. require the Consultants to sign an agreement stating they will only use the company provided email addresses for communication during the project

3. require updated antivirus USB blocking and host-based firewall on all consultant devices

4. require the consultant to connect to the company VPN while accessing confidential resources