An Analyst Is Using a Vulnerability Scanner to Look for Common

An analyst is using a vulnerability scanner to look for common security misconfigurations on devices. Which of the following might be identified by the scanner? (Choose two.)

A) The firewall is disabled on workstations.
B) SSH is enabled on servers.
C) Browser homepages have not been customized.
D) Default administrator credentials exist on networking hardware.
E) The OS is only set to check for updates once a day.