A security analyst is checking a client's infrastructure for weaknesses within their network, information systems, and organization so that they can be remediated and corrected before threat actors can exploit them. What is the security analyst doing?

Group of answer choices

ethical hacking

enumeration

vulnerability scanning

exploit surfing