CompTIA Security+ Exam Prep

Answer: B - Penetration testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management. Penetration testing uses a set of procedures and tools designed to test and possibly bypass the security controls of a system. Its goal is to measure an organization’s level of resistance to an attack and to uncover any weaknesses within the environment. Organizations need to determine the effectiveness of their security measures, not trust the security vendors.