A security administrator has been assigned to review the security posture of the standard corporate system
image for virtual machines. The security administrator conducts a thorough review of the system logs,
installation procedures, and network configuration of the VM image. Upon reviewing the access logs and user
accounts, the security administrator determines that several accounts will not be used in production. Which of
the following would correct the deficiencies?

A.
Mandatory access controls

B.
Disable remote login

C.
Host hardening

D.
Disabling services