Which of the following explains why a vulnerability scan might return a false positive?
A . The scan is performed at a time of day when the vulnerability does not exist.
B . The test Is performed against the wrong host.
C . The signature matches the product but not the version information.
D . The hosts are evaluated based on an OS-specific profile.
Answer: C