An outside security consultant produces a report of several vulnerabilities for a particular server. Upon further investigation, it is determine that the vulnerability reported does not apply to the platform the server is running on. Which of the following should the consultant do in order to produce more accurate results?

A. A black box test should be used to increase the validity of the scan
B. Perform a penetration test in addition to a vulnerability scan
C. Use banner grabbing to identify the target platform
D. Use baseline reporting to determine the actual configuration

Answer: B. Perform a penetration test in addition to a vulnerability scan

Computer Science & Information Technology

You might also like to view...

In the accompanying figure, the criterion for Current Due is 0. The query results for this query will display ____ in the Current Due field.

A. 0.00 B. $0 C. 0 D. $0.00

Computer Science & Information Technology

RTF stands for Rich ________ Format.

Fill in the blank(s) with the appropriate word(s).

Computer Science & Information Technology