An IS auditor discovered that a firewall has more services than needed. The IS auditor`s FIRST recommendation should be to: 

Answer options:

A. ensure logging is turned on.
B. deploy a network penetration team.
C. review configurations.
D. eliminate services except for HTTPS.

C