Penetration testing is a(n) __________ form of security assessment.

Penetration testing is an active form of security assessment because it involves actively attempting to exploit vulnerabilities in a system, mimicking real-world attacks to identify weaknesses from an attacker's perspective rather than just passively scanning.

While penetration testing can be comprehensive for its defined scope, it is rarely 'comprehensive' in a total sense, as it's typically time-boxed and resource-constrained.

'Total' is a vague term and, like 'comprehensive,' penetration testing usually has a defined scope and does not cover every possible attack vector.

Penetration testing typically involves skilled human testers and specialized tools, making it a relatively expensive form of security assessment, not inexpensive.