Which practice performs regular checks for security weaknesses?

• A. Data Encryption
• B. Vulnerability Scanning
• C. Incident Response Planning
• D. Network Segmentation

Answer: (B)

Regular checks for security weaknesses are performed through vulnerability scanning. Vulnerability scanning uses automated tools to continuously or periodically scan devices, systems, and applications for known vulnerabilities, missing patches, misconfigurations, and weak credentials. It provides actionable reports that guide remediation, making it a proactive way to reduce risk by identifying issues before attackers exploit them. Data encryption protects data confidentiality but does not discover weaknesses. Incident response planning focuses on detecting and responding to incidents after they occur, not on ongoing discovery of vulnerabilities. Network segmentation controls how access is granted and limits movement within the network, but it doesn’t perform regular vulnerability checks. Penetration testing simulates attackers and is typically done less frequently and more manually, whereas vulnerability scanning is designed for regular, automated checks.