A company recently implemented a patch management policy; however, vulnerability scanners have still been
flagging several hosts, even after the completion of the patch process. Which of the following is the MOST
likely cause of the issue?


A. The vendor firmware lacks support.
B. Zero-day vulnerabilities are being discovered.
C. Third-party applications are not being patched.
D. Code development is being outsourced.