During a Review of Vulnerability Scan Results, an Analyst Determines

Multiple Choice

During a review of vulnerability scan results, an analyst determines the results may be flawed because a control-baseline system, which is used to evaluate a scanning tool's effectiveness, was reported as not vulnerable. Consequently, the analyst verifies the scope of the scan included the control-baseline host, which was available on the network during the scan. The use of a control-baseline endpoint in this scenario assists the analyst in confirming:

A) verification of mitigation.
B) false positives.
C) false negatives.
D) the criticality index.
E) hardening validation.