A. It is best to catch critical infrastructure unpatched.
B. The tester could not provide an honest analysis.
C. The tester will have an actual security posture visibility of the target network. D. Network security would be in a "best state posture.
A. Transport layer port numbers and application layer headers
B. Application layer port numbers and the transport layer headers
C. Network layer headers and the session layer port numbers
D. Presentation layer headers and the session layer port numbers