A software development team recently migrated to new application software on the on-premises environment Penetration test findings show that multiple vulnerabilities exist If a penetration tester does not have access to a live or test environment, a test might be better to create the same environment on the VM.
Which of the following is MOST important for confirmation?
A . Unsecure service and protocol configuration
B . Running SMB and SMTP service
C . Weak password complexity and user account
D . Misconfiguration
Answer: A