a penetration tester is working on a project and sees a fairly recent voip vulnerability has come out. which of the following records would best help them narrow down potential targets?