Which of the following is a characteristic of a vulnerability scan that is not a characteristic of a penetration test?

A vulnerability scan identifies deep vulnerabilities.

A vulnerability scan is usually automated.

A vulnerability scan is usually a manual process.

A vulnerability scan can be done when a regulatory body requires it or on a pre$-$determined schedule.

Question $7$

Which of the following is considered an industry$-$specific cybersecurity regulation?

Health Insurance Portability and Accountability Act of $1996($HIPAA$)$

Sarbanes$-$Oxley Act of $2002($SOX$)$

Personal Information Protection and Electronic Documents Act $($PIPEDA$)$

Gramm$-$Leach$-$Bliley Act $($GLB$)$