What two areas present a security challenge for customers? (Choose two.)

IT departments are internal organizational units responsible for managing security, not an attack surface or external security challenge.

OT environments do present security challenges, but in the context of this question focused on common attack vectors, IoT devices and email are the intended answers.

Corporate priorities are a business concern and not a technical attack surface or direct security challenge in the threat landscape sense.

IoT devices present a significant security challenge because they often ship with weak or default credentials, lack regular patching mechanisms, and run minimal or no security agents, making them easy targets for compromise and lateral movement.

Email is the leading delivery mechanism for phishing, ransomware, and malware attacks, and remains a persistent challenge because it is both universally used and difficult to fully lock down without disrupting business operations.