ISC2 Certified in Cybersecurity (CC) Practice Question

Regular vulnerability scanning uses automated tools to probe systems and network devices for known weaknesses such as outdated software, unpatched flaws, or improper configurations. Finding these issues early allows defenders to correct them before attackers can exploit them, making vulnerability scanning a key preventive control. Penetration testing is a deeper, often manual, simulation of real attacks and is usually performed less frequently. Log monitoring focuses on detecting events that have already occurred rather than uncovering latent weaknesses. Packet filtering refers to enforcing firewall rules to block or permit traffic; it does not actively look for host vulnerabilities.