A Chief Information Security Officer (CISO) is running a test to evaluate the security of the corporate network and attached devices. Which of the following components should be executed by an outside vendor?
A) Penetration tests
B) Vulnerability assessment
C) Tabletop exercises
D) Blue-team operations

Question

Quizplus · Accepted Answer

Penetration tests are often executed by outside vendors to provide an unbiased evaluation of the network's security and to simulate real-world attacks.

A Chief Information Security Officer (CISO) Is Running a Test