You work for a chain of small medical clinics. Your company has decided to move all systems to a cloud-hosting provider. The security team of the cloud provider has identified the following issues with the servers. • Old unpatched version of a server operating system on several machines • Logging disabled in several servers • PII stored in the cloud in an encrypted format • DNS server

allows open relay Which of these issues should be addressed first?

A. Old unpatched versions of a server operating system on several machines
B Logging disabled in several servers
C PII stored in the cloud in an encrypted format
D DNS server allows open relay

A
Explanation: The first issue to address is updating and patching the server operating systems. They present the biggest current attack surface.