Identify the correct terminology that defines the above statement.

Vulnerability scanning automates the discovery of known vulnerabilities but typically does not involve active exploitation or assessing the chain of vulnerabilities like penetration testing.

Penetration testing involves simulating real-world cyberattacks against systems, networks, or applications to actively identify and exploit vulnerabilities, thereby assessing the effectiveness of existing security controls and the potential impact of a successful breach.

Security policy implementation is the act of putting security rules and guidelines into practice, which is a preventative measure, not an assessment technique involving simulated attacks.

Designing network security is the process of planning and architecting security measures for a network, which is a foundational activity, not an assessment activity of existing systems.