Which configuration management control supports continuous monitoring activities by limiting risk through providing only essential capabilities?

The concept of minimizing the functionality within a system is critical to effective risk management, particularly in the context of continuous monitoring activities. The option relating to least functionality emphasizes the idea that systems should only possess the features and capabilities that are essential to their intended purpose. This principle helps to reduce the attack surface and potential vulnerabilities that could be exploited by malicious actors.

By implementing least functionality, organizations can limit unnecessary features that might introduce risks, thereby enabling more effective monitoring and control. This approach ensures that the system operates within a constrained environment where only essential operations are permitted, thus facilitating more straightforward detection of anomalies or unauthorized behavior.

In contrast, alternatives such as full functionality or unrestricted environments expose systems to a broader range of potential threats and complicate monitoring efforts. Consequently, least functionality directly aligns with the objective of minimizing risk by fostering an environment where the focus is on safeguarding critical operations while simultaneously enabling the identification and response to potential threats.