The term describing ongoing actions taken to reduce vulnerability risk by applying patches and configuration changes is called what?

• A. Remediation
• B. NVD
• C. Buffer Overflows
• D. CWE

Answer: (A)

Remediation is the ongoing process of reducing vulnerability risk by applying patches and configuring systems securely. It covers patch management, applying security updates, adjusting configurations, disabling unnecessary services, and verifying that fixes actually mitigate the risk without breaking functionality. This is a continuous activity within vulnerability management, aimed at closing gaps over time.

The other terms refer to things that are not the corrective actions themselves: the National Vulnerability Database catalogs known vulnerabilities, the Common Weakness Enumeration classifies types of software weaknesses, and buffer overflows describe a specific vulnerability class.