Exploit code for a recently disclosed critical software vulnerability was publicly available (or download for several days before being removed. Which of the following CVSS v.3.1 temporal metrics was most impacted by this exposure?

An organization has tracked several incidents that are listed in the following table:
Which of the following is the organization's MTTD?

You are a penetration tester who is reviewing the system hardening guidelines for a company. Hardening guidelines indicate the following.
* There must be one primary server or service per device.
* Only default port should be used
* Non- secure protocols should be disabled.
* The corporate internet presence should be placed in a protected subnet Instructions :
* Using the available tools, discover devices on the corporate network and the services running on these devices.
You must determine
* ip address of each device
* The primary server or service each device
* The protocols that should be disabled based on the hardening guidelines