CompTIA Advanced Security Practitioner (CASP) Question 21

A threat advisory alert was just emailed to the IT security staff. The alert references specific types of host operating systems that can allow an unauthorized person to access files on a system remotely. A fix was recently published, but it requires a recent endpoint protection engine to be installed prior to running the fix.

Which of the following MOST likely need to be configured to ensure the system are mitigated accordingly? (Select two.)

A. Antivirus
C. Application whitelisting
D. Patch management
E. Group policy implementation
F. Firmware updates

Correct Answer: DF