Which of the following describes when a newly built network server would MOST likely become infected by malware?

Applying a hot fix typically addresses vulnerabilities, making the server more secure, not less.

Joining an Active Directory domain usually enhances security through centralized policy management and domain-based firewalls.

Enabling the TCP/IP stack allows the server to connect to the network, making it accessible to network-borne threats and potential malware before essential security software and hardening procedures are fully implemented. Without an enabled TCP/IP stack, the server cannot establish network communication, thus protecting it from network-based infections.

While the WMI service can be exploited, merely starting it does not inherently expose the server to malware in the same broad manner as enabling network connectivity.