An assessment too reports that the company’s web server may be susceptible to remote buffer overflow.
The web server administrator insists that the finding is a false positive. Which of the following should the
administrator do to verify if this is indeed a false positive?
A.
Use a banner grabbing tool
B.
Run a vulnerability scan
C.
Enforce company policies
D.
Perform a penetration test
I’m tired of these false negative answers.
Like it or not, it’s D. Shoot me if I’m wrong.
https://www.netsparker.com/blog/web-security/false-positives-the-dirty-secret-of-the-web-security-scanning-industry/
1
0
I chose D too. But the answer says otherwise.
1
1
I chose D also
1
0