Which Final Steps Should an Incident Responder Take Before Using

Multiple Choice

Which final steps should an Incident Responder take before using ATP to rejoin a remediated endpoint to the network, according to Symantec best practices?

A) Run an additional antivirus scan with the latest definitions. If the scan comes back as clean, rejoin the computer to the production network.
B) Run Windows Update to patch the system with the latest service pack. Once the system is up-to-date, rejoin the computer to the production network.
C) Use SymDiag to run a Threat Scan Analysis on the machine. Once the analysis comes back as clean, rejoin the computer to the production network.
D) Upgrade the client to the latest version of SEP. Once the client is upgraded, rejoin the computer to the production network.