A company's workforce is highly mobile with employees frequently travelling and working from remote locations. The IT security department needs to ensure that the devices used by this mobile workforce are consistently assessed for vulnerabilities. Which strategy would be most effective for maintaining the security posture of these devices when they are not connected to the company’s network?
Setup a vulnerability scanning service which all devices must connect to monthly.
Only allow devices to connect to the network through wired connections within the company's premises to ensure constant vulnerability assessments.
Deploy a client-based vulnerability scanning solution with agents installed on each device.
Schedule scans using an agentless vulnerability scanning solution when devices are known to be connected to the company's VPN.