A software development team recently migrated to new application software on the on-premises environment. Penetration test findings show that multiple vulnerabilities exist. If a penetration tester does not have access to a live or test environment, a test might be better to create the same environment on the VM. Which of the following is MOST important for confirmation?
A) Unsecure service and protocol configuration
B) Running SMB and SMTP service
C) Weak password complexity and user account
D) Misconfiguration

Question

Quizplus · Accepted Answer

The most important confirmation would be the unsecure service and protocol configuration, as it directly relates to vulnerabilities that could be exploited in the environment.

A Software Development Team Recently Migrated to New Application Software