An organization suffered a security breach in which the attacker exploited a Netlogon Remote Protocol vulnerability for further privilege escalation. Which two actions should the incident response…

Implementing a patch management process ensures a systematic, repeatable procedure for identifying, testing, and deploying security patches across the organization, preventing future unpatched vulnerabilities from being exploited.

Scanning for known viruses addresses malware infections, not protocol-level vulnerabilities like the Netlogon flaw that enable privilege escalation without malware.

Applying existing patches directly remediates the known Netlogon vulnerability (CVE-2020-1472) on company servers, closing the specific privilege escalation vector the attacker used.

Automating antivirus scans would not detect or remediate exploitation of a cryptographic protocol vulnerability such as Zerologon.

Defining roles in the incident response playbook improves response procedures but does not technically prevent the Netlogon vulnerability from being exploited again.