CompTIA SecurityX (CAS-005) CAS-005 — Question 205

A company's security policy states that any publicly available server must be patched within 12 hours after a patch is released. A recent IIS zero-day vulnerability was discovered that affects all versions of the Windows Server OS: Which of the following hosts should a security analyst patch first once a patch is available?