What is a recommended defense for the CIS Control for Application Software Security?

What tool creates visual network topology output and results that can be analyzed by Ndiff to determine if a service or network asset has changed?

Which of the following baselines is considered necessary to implement the Boundary Defense CIS Control?

If an attacker wanted to dump hashes or run wmic commands on a target machine, which of the following tools would he use?

An analyst investigated unused organizational accounts. The investigation found that:
-10% of accounts still have their initial login password, indicating they were never used
-10% of accounts have not been used in over six months
Which change in policy would mitigate the security risk associated with both findings?