Câu 228: SY0-601: CompTIA Security+ 2021

During a recent incident, an external attacker was able to exploit an SMB vulnerability over the internet. Which of the following action items should a security analyst perform FIRST to prevent this from occurring again?

1. A. Check for any recent SMB CVEs.
2. B. Install AV on the affected server.
3. C. Block unneeded TCP 445 connections. — đáp án hiện tại
4. D. Deploy a NIDS in the affected subnet.