Which activity is part of a vulnerability assessment process?

Question

Options

• AIdentifying vulnerabilities
• BExploiting vulnerabilities for access
• CEncrypting databases
• DInstalling operating systems

• A
  86% (25)
• B
  7% (2)
• C
  3% (1)
• D
  3% (1)

Explanation

Identifying vulnerabilities (A) is the core activity of a vulnerability assessment - the process systematically scans systems, networks, or applications to discover weaknesses before attackers can exploit them.

Why the distractors are wrong:

• B (Exploiting vulnerabilities) describes penetration testing, a separate, more aggressive activity that goes beyond assessment into active attack simulation.
• C (Encrypting databases) is a security hardening/mitigation control, not part of the discovery process.
• D (Installing operating systems) is a systems administration task with no direct connection to vulnerability assessment.

Memory tip: Think of vulnerability assessment as a doctor's checkup - you identify what's wrong, you don't perform surgery. The moment you start exploiting (operating), you've crossed into pen testing territory.

No community discussion yet for this question.