On Server1 in an AD DS domain you need to block registration of particular COM objects. Which technology should you use to prevent those COM objects from being registered?

Windows Defender Application Control (WDAC) is the correct choice because it allows you to define and enforce policies that control which applications, scripts, and COM objects can run on a system. By creating a WDAC policy, you can specifically block the registration of unwanted COM objects, preventing them from being used. Exploit protection focuses on mitigating vulnerabilities in applications and services, not on blocking the registration of specific COM objects. Smart App Control is a feature that blocks untrusted or potentially unwanted applications from running, but it doesn't offer the granular control needed to specifically target and block COM object registration.