CRISC: Certified in Risk and Information Systems ControlDemo

Question

The PRIMARY purpose of periodically performing penetration tests on Internet-facing applications is to:

A verify Internet firewall control settings.
B ensure policy and regulatory compliance.
C identify vulnerabilities in the system.
D assess the proliferation of new threats.

Explanation

Penetration testing attempts to exploit application weaknesses from an attacker’s perspective, helping identify vulnerabilities that could be used to compromise the system.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1545

Community Discussion