An administrator has been having problems with server security. Many of the servers have been infected with viruses in the past. Which of the following can be done to ensure that systems avoid OS…

An intrusion detection system (IDS) monitors network or system activities for malicious behavior and alerts administrators, but it does not prevent the initial exploit or infection itself; it is a detection and reactive control.

Dual-factor authentication strengthens user login security by requiring two different verification methods, but it does not prevent OS exploits or virus infections that do not rely on compromised user credentials.

A patch management process ensures that operating systems, applications, and firmware are regularly updated with the latest security fixes and patches. This closes known vulnerabilities and exploits that attackers frequently target to gain unauthorized access, deploy malware, or infect systems with viruses, thereby significantly enhancing server security.

Stronger user passwords protect against unauthorized access via guessing or brute-forcing login credentials, but they do not address vulnerabilities within the operating system itself that can be exploited by viruses.