For a semester exam, which option is correct about security regression testing?

A. removing old test cases B. retesting to ensure fixed vulnerabilities do not reappear C. only testing new colors D. ignoring patched modules