Vulnerability intelligence should come from four sources, which should be considered. According to your estimations, which one is the most advantageous? Why

There are four different sources of vulnerability intelligence that need to be considered. Which of these do you consider to be the most advantageous, in your opinion? Why?

Why should a vulnerability assessment and identification ever be done?

There are two goals of conducting a Network Vulnerability Assessment. Briefly describe the pro's and con's of both types. Do you foresee any different pro's or con's that may specifically apply to your organization? If you currently do not work for an organization where this applies, pick an organization that you know well and approach it from the perspective of being employed by that organization

This calls for a clarification of the differences between validation and verification. Testing strategies and methods, as well as test case creation, are shown by both situations.

What's the difference between vulnerability scanning and penetration testing? What equipment would they utilize to carry out each of their procedures?

There are two graphs presented from the CERT on reported incidents and vulnerabilities. Keep in mind the difference between an incident and vulnerability. While these charts are dated they still provide valuable trend information that continues to rise. Today, both security incidents and security vulnerabilities continue to rise for a variety of reasons. What reasons can you provide for the continuing upwards trend in the number of incidents reported? You should provide at least four (4) reasons with supporting data and reasoned arguments to support your answer. Good answers will provide facts, reasoned arguments and references that go beyond anecdotal information. Explain using facts, reasoned arguments and references that go beyond anecdotal information and link to sources. PLEASE ADD YOUR SOURCES! Please have clear writing as well! Thank you!

It's common knowledge that strong security rules must be constantly enforced for them to be effective. Justify the need for security policy creation, rollout, and upkeep.

Four sources of vulnerability intelligence should be identified and described. Which one seems to be the most advantageous? Why?

There are four different kinds of vulnerability intelligence that must be considered. In your view, which would be the best? Why?