Managed laptops used by staff who administer cloud control planes need malware protection and full-disk encryption. Which control category addresses those device requirements?

Endpoint protection for devices accessing cloud admin planes includes malware defenses and disk encryption to reduce compromise and data-loss risk on managed laptops. Shared responsibility does not eliminate customer duties for client devices. Disabling encryption or granting unmanaged personal devices owner roles weakens the control plane. Cloud+ security controls objectives include endpoint protection in cloud access scenarios.