QuestionQ27Verified/Risk ResponseCopy linkReport a problemAsk AstroTutorSave questionWhat is the MAIN reason for conducting a penetration test?ATo validate the results of a vulnerability assessmentBTo validate the results of a control self-assessmentCTo validate the results of a threat assessmentShow AnswerAnswerExplanationPenetration testing validates identified vulnerabilities by attempting controlled exploitation to confirm their existence and practical impact. NIST identifies penetration testing as a vulnerability-validation technique and states that it can validate vulnerabilities.Learn moreNIST CSRC: Target Vulnerability Validation TechniquesNIST SP 800-115: Technical Guide to Information Security Testing and AssessmentShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion