Validating which vulnerabilities in a network environment are able to be exploited by an attacker is called what?

Anomaly detection monitors network or host behavior for deviations from an established baseline and does not specifically identify or validate exploitable vulnerabilities.

Vulnerability scanning uses automated tools to enumerate hosts, match discovered services and software versions against known vulnerability databases, and determine which weaknesses are present and exploitable within the environment - producing a prioritized list of security gaps for remediation.

Perimeter assessment evaluates the security posture of network boundary controls and is not the standard term for validating exploitable vulnerabilities across an environment.

Penetration testing goes beyond scanning by actively attempting to exploit vulnerabilities to measure real-world impact, making it a more invasive process than simply validating which vulnerabilities exist.