Jeff is tasked with defining the attack surface of his organization's Microsoft SQL server. What activity would be best for Jeff to use to establish the server's attack surface?

Question $19$ options:

Mitigating or eliminating all vulnerabilities

Monitoring all activity and continuously responding to events

Establishing a security baseline

Identifying the server's vulnerabilities