vulnerability questions