Question: Which of the following is the MAIN objective in contracting with an external company to perform penetration testing?
A.) To mitigate technical risks
B.) To have an independent certification of network security
C.) To receive an independent view of security exposures
D.) To identify a complete list of vulnerabilities

Download pdf (with explanations) edition of this exam.