An analyst is using a vulnerability scanner to look for common security misconfigurations on devices. Which of the following might be identified by the scanner? (Select TWO).

A disabled host-based firewall is a direct security misconfiguration that removes a critical layer of defense on workstations, leaving them exposed to lateral movement and network-based attacks; vulnerability scanners check firewall status as part of standard configuration audits.

SSH being enabled on servers is not inherently a misconfiguration - it is a standard, secure remote administration protocol, and its presence alone would not be flagged as a misconfiguration by a vulnerability scanner.

Browser homepage customization is a user preference setting with no direct security implication, and vulnerability scanners do not assess aesthetic or productivity configurations unrelated to security posture.

Default administrator credentials on networking hardware are one of the most common and critical security misconfigurations, as attackers routinely attempt default username/password combinations; vulnerability scanners specifically test for unchanged default credentials as they represent an easily exploitable weakness.

Checking for updates once a day is a reasonable and functional patch management schedule; while less frequent than ideal, it is not a misconfiguration and would not typically be flagged by a vulnerability scanner as a security issue.