During a security assessment, which option is most accurate about Reporting vulnerabilities?

The correct answer is vulnerability reports should include evidence, impact, severity, affected assets, and remediation guidance. This matches the course topic 'Reporting vulnerabilities' in Vulnerability Assessment & Reverse Engineering.