In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?

A full operational test typically focuses on verifying the complete functionality and operational readiness of a system, not primarily on actively circumventing security features.

A penetration test involves authorized individuals actively attempting to exploit vulnerabilities in a system, often mimicking real-world attack scenarios with varying levels of information about the target, to circumvent security features and assess the system's resilience against attacks.

A paper test, or desk check, involves reviewing security documentation and procedures without actual interaction with the live information system.

A walk-through test involves a team reviewing procedures and discussing hypothetical scenarios, similar to a paper test but often more interactive, without engaging with the live system.