MCQ: In what scenario would an attacker be most likely to exploit vulnerabilities identified by a web application vulnerability scanner?

• A. After notifying the organization about the vulnerabilities.
• B. Attackers are unlikely to exploit identified vulnerabilities.
• C. During a planned penetration test.
• D. Post-assessment, when vulnerabilities remain unaddressed.