A vulnerability scan is sufficient proof that a vulnerability has been successfully exploited.

### Why this is right The statement is false. A vulnerability scan can identify a weakness or exposure, but it does not by itself prove that an attacker used it. Evidence of exploitation requires investigation of relevant activity and affected systems. ### The concept Vulnerability management and incident response are related but different. Scanning helps discover and prioritize weaknesses. Incident investigation uses logs, endpoint evidence, network records, and other information to determine whether unauthorized activity occurred. A scan finding can justify remediation even when no incident is confirmed. ### The other options - **The statement is false**: A finding describes a condition; exploitation is an action that requires separate evidence. ### Terms - **Vulnerability scan**: An automated or systematic check for known weaknesses or insecure conditions. - **Exploitation**: Taking advantage of a weakness to gain access or cause an effect. ### Remember A vulnerability finding establishes exposure, not attacker use.