A cybersecurity consultant is reviewing the following output from a vulnerability scan against a newly installed MS SQL Server 2012 that is slated to go into production in one week:

Based on the above information, which of the following should the system administrator do? (Select TWO).

A. Verify the vulnerability using penetration testing tools or proof-of-concept exploits.

B. Review the references to determine if the vulnerability can be remotely exploited.

C. Mark the result as a false positive so it will show in subsequent scans.

D. Configure a network-based ACL at the perimeter firewall to protect the MS SQL port.

E. Implement the proposed solution by installing Microsoft patch Q316333.