What is the purpose of a security audit?

Question

Options

• ATo assess the effectiveness of security controls
• BTo test the system's ability to withstand an attack
• CTo identify vulnerabilities in a system or network
• DAll of the above

• A
  92% (22)
• B
  4% (1)
• C
  4% (1)

Explanation

A security audit is a systematic evaluation of an organization's security posture, primarily focused on assessing how effective existing security controls are at protecting assets. While vulnerability identification (C) and penetration testing (B) are related activities, they are distinct practices. A vulnerability assessment finds weaknesses, a penetration test simulates attacks, and a security audit measures whether controls meet defined policies and standards. The correct answer is A, not D, because the primary and defining purpose of an audit is control effectiveness assessment - the other options describe separate security disciplines.

No community discussion yet for this question.