A security architect wants to ensure that only corporate laptops that meet defined security requirements (disk encryption enabled, endpoint protection running, and OS patched) can access sensitive internal applications. Endpoints that fall out of compliance should automatically be blocked from those applications until they are remediated, without an administrator manually reviewing each device. Which benefit of device compliance enforcement best describes what the architect is trying to achieve?