Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.

### Why this is right Audits and penetration tests examine systems for weaknesses. Finding and correcting issues before malicious exploitation reduces exposure, though testing must be authorized and conducted safely. ### The concept Security reviews complement secure development and monitoring. They can expose problems that routine operation does not reveal, including unsafe input handling or excessive permissions. Findings need remediation and follow-up rather than merely being recorded. ### The other options - **False**: this is incorrect because the lesson explicitly recommends regular audits and penetration testing to identify and fix vulnerabilities. ### Terms - **Penetration test**: an authorized security assessment that tests whether weaknesses can be exploited. - **Audit**: a structured review of controls, systems, or practices. ### Remember Testing finds weaknesses; remediation and retesting show whether they were addressed.