Summarizing findings and next steps is known as:

An independent check that patches succeeded is a:

Confirming fixes by re-running scans is called:

Skipping a patch under formal approval creates an:

Controls used when patching is impossible are:

Using VLANs to limit vulnerable system access is:

Quickly applying vendor fixes is known as:

A company’s willingness to accept risk is called:

Considering asset value and exploitability defines:

A unique identifier for a known flaw is:

A standard numeric severity rating is:

Ranking vulnerabilities by business impact is:

Missing a real vulnerability in a scan is a:

A scan flagging a harmless open port is a:

Reviewing configuration and processes is part of:

A public program rewarding bug reports is a:

Ethical attack simulations are known as:

Monitoring hacker forums for leaked exploits refers to:

Membership in an ISAC provides:

Paying for curated threat indicators comes from a:

Gathering publicly available cyber-threat data is:

Watching third-party libraries for new bugs is known as:

Running an app and observing its behavior identifies flaws via:

Reviewing source code without running it is called:

Which tool passively inspects traffic for known weaknesses?