A systems administrator recently conducted a vulnerability scan of the intranet. Subsequently the organization was successfully attacked by an adversary. Which of the following is the MOST likely explanation for why the organizations network was compromised?

A. There was a false positive since the network was fully patched

B. The systems administrator did not perform a full scan

C. The systems administrator performed a credentialed scan

D. The vulnerability database was not updated