The librarian wants to secure the public Internet kiosk PCs at the back of the library. Which of the following would be the MOST appropriate? (Select TWO).

Device encryption protects data at rest if a device is stolen, but public kiosks typically store no sensitive user data, making this a low-priority control.

Antivirus software protects shared public kiosks from malware that untrusted users may inadvertently or intentionally introduce through web browsing or external media, which is the primary logical threat to public terminals.

A privacy screen limits visual shoulder-surfing but does not secure the PC itself and is not among the most critical security measures for a shared kiosk.

Cable locks physically secure the kiosk hardware to a desk or fixture, preventing theft of the device itself, which is the primary physical security concern in a public-access library environment.

Remote wipe is designed for mobile devices or laptops that store user data and may be lost or stolen; it is not a standard or practical control for stationary library kiosk PCs.