An outside security consultant produces a report of several vulnerabilities for a particular server. Upon
further investigation, it is determine that the vulnerability reported does not apply to the platform the
server is running on. Which of the following should the consultant do in order to produce more accurate
results?

A.
A black box test should be used to increase the validity of the scan

B.
Perform a penetration test in addition to a vulnerability scan

C.
Use banner grabbing to identify the target platform

D.
Use baseline reporting to determine the actual configuration