An outside security consultant produces a report of several vulnerabilities for a particular server. Upon further
investigation, it determines that the vulnerability reported does not apply to the platform the server is running
Which of the following should the consultant do in order to produce more accurate results?
A black box test should be used to increase the validity of the scan
Perform a penetration test in addition to a vulnerability scan
Use banner grabbing to identify the target platform
Use baseline reporting to determine the actual configuration