A.Vulnerability scanning is performed after penetration testing

B.Vulnerability scanning actively exploits systems, while penetration testing only identifies weaknesses

C.Penetration testing simulates real-world attacks, while vulnerability scanning identifies potential weaknesses without exploitation

D.Penetration testing is automated, while vulnerability scanning is manual

A.Disabling tracking features to reduce costs

B.Maintaining accurate and detailed records

C.Reviewing past incident data for improvements

D.Ignoring minor security alerts

A.To evaluate response efforts and improve future incident management strategies

B.To prepare for financial audits

C.To document incidents for compliance purposes

D.To identify employees responsible for the incident

A.Defined incident classification and severity levels

B.Completely outsourcing all security functions without internal oversight

C.Regular updates to incident response procedures

D.Ignoring minor security breaches

A.A list of terminated employees

B.Internal employee disputes and HR complaints

C.Incident timeline, impact analysis, and remediation steps

D.Irrelevant logs from unrelated systems