An outside security consultant produces a report of several vulnerabilities for a particular server. Upon further
investigation, it determines that the vulnerability reported does not apply to the platform the server is running
on.
Which of the following should the consultant do in order to produce more accurate results?

A.
A black box test should be used to increase the validity of the scan

B.
Perform a penetration test in addition to a vulnerability scan

C.
Use banner grabbing to identify the target platform

D.
Use baseline reporting to determine the actual configuration