End-user education is crucial after malware removal to prevent recurrence. Teaching safe browsing habits and security awareness completes the remediation cycle.
Mark Soper - Mike Meyers ' Lab Manualstates:
"Educating the user after malware remediation is part of the CompTIA malware response methodology. This includes training on phishing and safe practices."

MDM hardening often includes enforcing stronger authentication on mobile devices. The phrase "unique to each user" points to something inherent to the individual-biometrics-rather than something the user knows (password/pattern) or something they have (PIV/smart card). Quentin Docter explains: "Biometric devices use physical characteristics to identify the user. This type of authentication is considered something that you are," and lists common implementations including "fingerprint... scanners." This exactly matches a fingerprint, which is unique per person and commonly enforced via device policies in MDM environments.
Docter also notes mobile devices increasingly implement biometrics for access control, specifically citing
"fingerprint access control" adopted by manufacturers. A drawn pattern and a password are knowledge factors and can be shared/observed, while a PIV card is a possession factor (something you have) and can be lost or loaned. Because the question specifies a hardening technique "unique to each user," the best match is the biometric factor: fingerprint (B).

The key clue is "uses built-in sensors to monitor targets without their consent." In the All-in-One Exam Guide's mobile security coverage, it explains that modern devices can be abused for unauthorized location tracking and that device settings or apps may send location information "to third parties, sometimes without explicit consent or knowledge." It also warns about unauthorized camera and microphone activation , stating that "app features, malware, and unauthorized network connections can potentially be used to activate... built-in cameras and microphones," which enables an attacker to "effectively spy on anyone near it." The Mike Meyers Lab Manual mirrors this exactly: unauthorized tracking can occur without explicit consent and built-in cameras/microphones are "of particular concern" because they let an attacker spy nearby.
That specific "surveillance via sensors" behavior aligns best with stalkerware (a spyware-style category focused on covert monitoring). By contrast, a rootkit's hallmark is hiding itself using low-level OS control, and a Trojan primarily masquerades as something harmless. Therefore, D is the best answer.

A low-cost home lab for practicing server management and scripting strongly points to Linux because it is widely available at no cost and is designed to support many server-style workloads. The All-in-One guide states plainly: "Linux is a popular, free, open source operating system," and notes that there are many distributions (distros), giving flexibility for different needs. Quentin Docter adds key context about Linux's purpose: Linus Torvalds created it as "a completely open source operating system for the world to use...
completely free for anyone to use," and highlights that many Linux distributions exist today.
From a cost standpoint, Docter's licensing section defines open source as "not only... free, but the source code... is also shared," and explicitly lists "OSs such as Linux" as open source examples. This directly supports "low-cost." Finally, Linux is a common target environment for real server administration and scripting practice (shell tools, package repositories, services), making it the best match versus ChromeOS/macOS/Windows for this lab goal.

Linux is an open-source operating system that is freely available and does not require traditional licensing fees. It is highly versatile and scalable, making it suitable for both workstations and servers. Many enterprise environments use Linux to reduce software costs and benefit from robust server features.
B). Windows requires per-device or per-user licensing for both workstation and server editions.
C). macOS is proprietary and limited to Apple hardware with licensing restrictions.
D). Chrome OS is designed for lightweight devices and lacks server functionality.
Reference:
CompTIA A+ 220-1102 Objective 1.8 & 1.9: Identify common features and tools of the Linux client/desktop OS.
Study Guide Section: Open-source operating systems and licensing considerations