A vulnerability scan identifies that an SSL certificate does not match the hostname; however, the client disputes the finding. Which of the following techniques can the penetration tester perform to adjudicate the validity of the findings?
A) Ensure the scanner can make outbound DNS requests.
B) Ensure the scanner is configured to perform ARP resolution.
C) Ensure the scanner is configured to analyze IP hosts.
D) Ensure the scanner has the proper plug -ins loaded.

Question

Quizplus · Accepted Answer

The penetration tester should ensure the scanner can make outbound DNS requests to verify if the SSL certificate matches the hostname by resolving the domain name to the correct IP address.

A Vulnerability Scan Identifies That an SSL Certificate Does Not