MB-R371
Validates a credential-free inventory and attestation showing how vendor default accounts are disabled, removed, or protected by changed authentication factors. Explicitly unsafe account states fail; complete structured evidence still requires independent human verification against the scoped system components.