Which of the following is a web application control that should be put into place to prevent exploitation of Operating System (OS) bugs?

Checking arguments in function calls is an input validation control that prevents application-level vulnerabilities such as injection attacks, not OS-level bug exploitation.

OS bugs are addressed by applying vendor-released security patches; testing for the security patch level of the environment ensures that known vulnerabilities in the operating system have been remediated before they can be exploited. This control directly maps to vulnerability management practices where unpatched systems are the primary attack surface for OS-level exploits. Verifying patch levels as a web application control ensures the underlying platform does not introduce exploitable weaknesses.

Including logging functions is a detective control that records activity for forensic or audit purposes but does not prevent the exploitation of OS bugs.

Digitally signing application modules ensures code integrity and authenticity of the application itself, but does not address or remediate vulnerabilities present in the underlying operating system.