A company is growing and starting to get serious about securing their digital assets. They hire a recent IT security college graduate as their security manager. The company wants to see if they have any deep vulnerabilities, so the newly hired security manager suggests running a vulnerability scan. Which of the following statements are most likely to be true? Select two.

Group of answer choices

They will successfully achieve their goal provided the vulnerability scanner is properly configured.

It would be more beneficial to run a vulnerability scan first followed by a penetration test.

They will not achieve their goal because a vulnerability scan may only find surface problems.

It would be more beneficial to run a penetration test first followed by a vulnerability scan.