Which item is a U.S. government resource for vulnerability management data?

• A. Open Web Application Security Project
• B. Operationally Critical Threat, Asset, and Vulnerability Evaluation
• C. Payment Application Data Security Standard
• D. National Vulnerability Database

Answer: (D)

The National Vulnerability Database is the U.S. government resource for vulnerability management data. It is maintained by NIST as part of the U.S. government’s effort to standardize and publish vulnerability information. The NVD provides standardized data for each vulnerability, including CVE identifiers, CVSS scores, impact metrics, and links to advisories and fixes. This makes it a reliable, authoritative source that security tools and teams rely on to assess risk, prioritize patches, and track remediation efforts across environments.

Other options are not government resources: OWASP is a nonprofit focused on web security best practices, OCTAVE is a risk-management framework, and PCI DSS is a private industry security standard.