Joe, a security analyst, is attempting to determine if a new server meets the security requirements of his organization. As a step in this process, he attempts to
identify a lack of security controls and to identify common misconfigurations on the server. Which of the following is Joe attempting to complete?

A.
Black hat testing

B.
Vulnerability scanning

C.
Black box testing

D.
Penetration testing