Organizations often $.....$ to validate that vulnerabilities are actually fixed.

a$.$

Install a patch

b$.$

Employ penetration testing

c$.$

Update their application code

d$.$

Upgrade their infrastructure