Which item can reduce the attack surface of an operating system?

Which item can reduce the attack surface of an operating system?

A.
Installing HIDS

B.
Patch management

C.
Installing antivirus

D.
Disabling unused services