During a recent audit, it was discovered that many services and desktops were missing security patches. Which of the following BEST describes the assessment that was performed to discover this issue?

a) Vulnerability scan
b) Penetration test
c) Risk assessment
d) Security audit