The strongest control to reduce immediate data-loss risk in this scenario is to remove or restrict access to the source code repository for the departing employee. Cloud+ (CV0-004) security objectives emphasize identity and access management (IAM), least privilege, and offboarding procedures as core controls to prevent unauthorized data access. Once an employee has provided notice-especially when suspicious activity is detected-organizations should rapidly adjust permissions by disabling accounts, removing group memberships, revoking tokens/SSH keys, and limiting repository access to only what is operationally required (or eliminating it entirely). This directly stops continued exfiltration from the primary source.
A policy against password sharing (A) is important but does not address an insider with valid access.
Blocking an IP (C) is brittle because the user can change networks or use VPNs, and it doesn't fix the authorization issue. Cutting all internet access (D) is overly disruptive and may not prevent local syncing or alternative paths. Blocking USB transfers (E) doesn't stop cloud downloads. Therefore, access removal
/restriction to the repository is the most effective mitigation.

A canary deployment is a pattern that reduces the risk of introducing a new software version in production by slowly rolling out the change to a small subset of users before rolling it out to the entire infrastructure. It's an effective strategy to prevent outages since it allows for monitoring and quick rollback if issues arise without affecting all users.
Canary releases are part of deployment strategies that can help mitigate the risk of outages during updates, a concept included in the CompTIA Cloud+ curriculum.

Enabling tracing in the application can help determine the source of high latency by providing detailed information on HTTP request and response times, as well as response codes. This can identify which API calls are experiencing delays and contribute to overall application latency, allowing for targeted troubleshooting and optimization.

Since the cloud administrator can access the application from the same site but users cannot, it suggests a possible issue with the network routing. The routing table may need to be updated to ensure that traffic from the users' location is correctly directed to the new location of the remotely hosted application after the migration. References: CompTIA Network+ Certification Study Guide by Glen E. Clarke.

Archive storage is the most cost-effective type of tiered storage for retaining data that is infrequently accessed and only when required for compliance reasons. It is designed for long-term storage and offers lower storage costs compared to hot, cold, or warm storage tiers.
Understanding data storage and the various tiers, including archival storage, is part of cloud storage strategies covered in the CompTIA Cloud+ certification.