Q46
Single choice
During an engagement, a penetration tester found some weaknesses that were common across the customer's entire environment. The weaknesses included the following:
1. Weaker password settings than the company standard
2. Systems without the company's endpoint security software installed
3. Operating systems that were not updated by the patch management system.
Which of the following recommendations should the penetration tester provide to address the root issue?