An assessment too reports that the company’s web server may be susceptible to remote buffer overflow. The
web server administrator insists that the finding is a false positive. Which of the following should the
administrator do to verify if this is indeed a false positive?
Use a banner grabbing tool
Run a vulnerability scan
Enforce company policies
Perform a penetration test