For a semester exam, which option is correct about maintenance security?

A. never applying fixes B. removing test environments C. patching, updating and improving software while preserving security D. sharing admin credentials