Which of the following actions could a security engineer take to ensure workstations and servers are properly monitored for unauthorized changes and software?

Installing endpoint management software on all systems is the most effective action. This software provides comprehensive monitoring capabilities, including detecting unauthorized changes to system files, identifying unapproved software installations, enforcing security policies, and providing real-time alerts. Configuring systems to log scheduled tasks is useful for auditing but doesn't actively monitor for unauthorized changes or software installations. Collecting and monitoring all outbound traffic is a network-level control, not directly focused on internal system changes or unauthorized software on endpoints. Blocking traffic based on malicious signatures is a preventative measure against known threats, but it doesn't monitor for unauthorized software already present or changes made by legitimate but compromised accounts.