Recently, your desktop support unit has been increasingly dealing with malware that end users have downloaded from websites. To improve the chances of malware being detected and stopped before it reaches the endpoint, which of the following options is MOST likely to help?

A web application firewall $($WAF$).$

Web filtering based on URL categorization.

Network choke points.

A network firewall performing stateful packet filtering.