A Security Consultant Was Asked to Revise the Security Baselines

A security consultant was asked to revise the security baselines that are utilized by a large organization. Although the company provides different platforms for its staff, including desktops, laptops, and mobile devices, the applications do not vary by platform. Which of the following should the consultant recommend? (Choose two.)

A) Apply patch management on a daily basis.
B) Allow full functionality for all applications that are accessed remotely.
C) Apply default configurations of all operating systems.
D) Apply application whitelisting.
E) Disable default accounts and/or passwords.