In Determining Whether a System Is Adequately Protected from Attacks

Multiple Choice

In determining whether a system is adequately protected from attacks by computer viruses,all of the following policies are relevant except

A) the policy on the purchase of software only from reputable vendors
B) the policy that all software upgrades are checked for viruses before they are implemented
C) the policy that current versions of antivirus software should be available to all users
D) the policy that permits users to take files home to work on them