WPA3 SAE prevents brute-force attacks.

The first step in reducing the attack surface of vulnerable, end-of-support systems is to apply hardening recommendations. Hardening involves applying security configurations, such as disabling unnecessary services, enforcing strong authentication, and tightening access controls to mitigate vulnerabilities on systems that can no longer receive patches or support. While patching and deploying security tools like IPS/IDS and antivirus are important, hardening addresses the fundamental weakness of these legacy systems by reducing their exposure to threats. CASP+ recommends hardening as a crucial measure in environments where patching or upgrading may not be feasible, particularly for unsupported systems.
Reference:
CASP+ CAS-004 Exam Objectives: Domain 2.0 - Enterprise Security Operations (System Hardening) CompTIA CASP+ Study Guide: System Hardening for End-of-Life Systems

Because all the requirements want to keep the control of the software.
- Support all phases of the SDLC.
PaaS (manage data, app)
- Use tailored website portal software.
PaaS (manage app)
- Allow the company to build and use its own gateway software.
to build its own gateway "on top".... this is PaaS...the req assumes there's an existing GW but company would rather use theirs
- Utilize its own data management platform.
PaaS (manage application.) u would manage data from an application interface
- Continue using agent-based "security tools" (is an application).
The agent based security tools would be on user devices.