An IT manager wants to prevent end users from booting alternative operating systems on workstations.

Setting a BIOS password is a security-related best practice that would prevent end users from booting alternative operating systems on workstations. A BIOS password restricts access to the BIOS settings, which control the boot order and other hardware configurations of the computer. Installing a host-based firewall, patching the operating system, and removing unnecessary software are also security-related best practices, but they do not directly prevent booting alternative operating systems on workstations. References: The Official CompTIA IT Fundamentals (ITF+) Student Guide (Exam FC0-U61), Chapter 7: Security Concepts1