A company performed an annual penetration test of its environment. In addition to several new findings, all of the previously identified findings persisted on the latest report. Which of the following is the MOST likely reason?
A) Infrastructure is being replaced with similar hardware and software.
B) Systems administrators are applying the wrong patches.
C) The organization is not taking action to remediate identified findings.
D) The penetration testing tools were misconfigured.

Question

Quizplus · Accepted Answer

The most likely reason for the persistence of previously identified findings is that the organization is not taking action to remediate them. If the findings are not addressed, they will continue to appear in subsequent reports.

A Company Performed an Annual Penetration Test of Its Environment