Question $28$

An organization recently conducted a vulnerability scan of its network infrastructure. The

security team followed up on the results, remediating all vulnerabilities flagged by the

scanner. However, a month later, an external penetration tester was able to exploit a known

vulnerability that the scanner had missed. What BEST describes the vulnerability scanner's

failure to detect an actual vulnerability present in the system?

False positive

False negative

True positive

True negative