Select ALL purposes for which the course material identifies Metasploit as useful.

### Why this is right - **Penetration testing with authorization** is a listed use: professionals test systems to identify weaknesses, but only with permission to test them. - **Exploit research** is listed because the framework can support investigating and testing exploit code. - **Patch installation verification** is listed because testing can help check whether a patch has addressed a weakness. - **Regression testing** is listed because testing can check whether a change has reintroduced a previously addressed problem. ### The concept A security tool can support several kinds of work, but the result depends on how it is used and what it can observe. Metasploit can help test a system or a patch, but a successful test or a lack of detected issues does not prove that all vulnerabilities are gone. The tool also does not guarantee that every exploit will be detected. Findings must be interpreted alongside other evidence and organizational risk decisions. ### The other options - **D. Guaranteeing that every exploit will be detected**: Metasploit is not described as a complete detection system, and the material warns that it does not contain all exploits and may not be up to date. ### Terms - **Penetration testing**: An authorized assessment that attempts to find security weaknesses by testing a system. - **Patch**: A software update intended to correct a defect or weakness. - **Regression testing**: Testing after a change to check that earlier functionality or fixes still work. ### Remember Metasploit can support testing activities, but a test result is evidence, not a guarantee of complete security.