If an Endpoint Detection and Response (EDR) system detects that an endpoint does not have a required patch installed, which statement best characterizes the actions it is able to take automatically?

A. No actions can be taken directly on the endpoint but the endpoint's owner can be notified of the actions he/she is expected to take

B. Nothing can be done directly to the endpoint but a system administrator can be alerted to handle the problem with the system owner

C. The endpoint can be either allowed access to all network resources or quarantined and denied access to all network resources

D. The endpoint can be quarantined from all network resources except those that allow it to download and install the missing patch