New zero-day attacks are announced on a regular basis against a broad range of technology systems. Which of the following best practices should a security manager do to manage the risks of these…

An emergency response call tree addresses incident communication logistics but does not help the team assess or reduce exposure to zero-day attack vectors.

Maintaining an inventory of applications allows security teams to immediately determine whether a newly announced zero-day affects any software in the environment, enabling rapid and targeted risk assessment.

Backing up router and firewall configurations supports disaster recovery but does not directly help identify which systems are vulnerable to a newly disclosed zero-day.

A list of critical systems allows the security manager to prioritize response and mitigation efforts by identifying which zero-day-affected systems pose the greatest business risk if compromised.

Updating network diagrams improves documentation but does not directly enable rapid identification of which applications or critical systems are exposed to a zero-day vulnerability.