According to IIA guidance, which of the following statements is true regarding penetration testing?

Question

Options

• ATesting should not be announced to anyone within the organization to solicit a real-life response.
• BTesting should take place during heavy operational time periods to test system resilience.
• CTesting should be wide in scope and primarily address detective management controls for
• DTesting should address the preventive controls and management's response.

• A
  18% (3)
• B
  71% (12)
• C
  6% (1)
• D
  6% (1)

Explanation

You've hit your session limit · resets 10:20pm (America/New_York)

No community discussion yet for this question.