A user has opened a Web site that automatically starts downloading malicious code onto his computer. What should he do to prevent this? Each correct answer represents a complete solution. Choose two.

ActiveX Controls are browser-hosted executable components that malicious sites can invoke to silently download and run payloads; disabling them removes the execution pathway used in many drive-by download attacks.

Active Scripting (JavaScript and VBScript) is the mechanism most commonly used by malicious pages to trigger automatic downloads or redirect the browser to exploit code; disabling it stops these scripts from executing at all.

File Integrity Auditing detects unauthorized changes to files after they have already occurred and does not block or prevent malicious code from being downloaded to the system in the first place.

Configuring Security Logs records security-relevant events for later forensic review but provides no real-time blocking capability to stop malicious code from downloading during an active browser session.