An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?

An organization has created a policy that allows software from an approved list of applications to be installed on workstations. Programs not on the list should not be installed. How can the organization best monitor compliance with the policy?

An auditor is focusing on potential vulnerabilities. Which of the following should cause an alert?

Which of the options below will do the most to reduce an organization's attack surface on the internet?