Match each vulnerability management step with its purpose.

### The pairs | Item | Matches | Why | |---|---|---| | Discover | Identify assets, versions, owners, and business importance | You cannot protect or prioritize systems that are unknown. | | Identify | Find weaknesses and exposure | Scanning, reviews, advisories, and testing reveal conditions needing attention. | | Assess | Estimate likelihood and impact | Assessment explains how plausible exploitation is and what harm could follow. | | Prioritize | Choose which risks require attention first | Ranking directs limited time and resources toward the highest risks. | | Remediate | Reduce or remove the risk | Patching, isolation, reconfiguration, or replacement can address the weakness. | | Verify | Check that the fix worked | Testing confirms the weakness was resolved and the change is safe. | | Monitor | Track recurrence, new advisories, and exceptions | Risk changes over time, so ongoing observation is needed. | ### Remember Know the asset, find the weakness, judge the risk, fix it, verify, and keep watching.