A company performed an annual penetration test of its environment. In addition to several new findings, all of the previously identified findings persisted on the latest report.
Which of the following is the MOST likely reason?
A . Infrastructure is being replaced with similar hardware and software.
B . Systems administrators are applying the wrong patches.
C . The organization is not taking action to remediate identified findings.
D . The penetration testing tools were misconfigured.
Answer: C