An assessment too reports that the company’s web server may be susceptible to remote buffer
overflow. The web server administrator insists that the finding is a false positive. Which of the
following should the administrator do to verify if this is indeed a false positive?
A.
Use a banner grabbing tool
B.
Run a vulnerability scan
C.
Enforce company policies
D.
Perform a penetration test