A customer is using IBM Tivoli Security Compliance Manager. They know which servers/desktops
are in compliance and which are not. Non-compliant servers/desktop owners are notified of the
steps they need to take to achieve compliance. Which two additional actions would further
enhance the customer security process maturity level? (Choose two.)

A.
Removing users accounts until they can demonstrate compliance

B.
Removing Web single sign-on until users can demonstrate their machines are in compliance

C.
Encrypting select files on offending server/desktopsystems?disks, until they can demonstrate
compliance

D.
Providing a “sentry” service that prevents non-compliant machines from connecting to the
network, until they achieve compliance

E.
Offering push-button compliance options, thereby simplifying the steps users must take to get
their non-compliant servers/desktops in compliance