Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Risk assessment, I would think a Pen Test could have limitations depending on the scope so may not be as thorough.
B. Penetration testing Among the options provided, penetration testing is the most practical and direct method for identifying security control gaps on an application server. Penetration testing involves simulating cyber attacks against your computer system to check for exploitable vulnerabilities. This type of testing is designed to discover weaknesses in security controls that an attacker could exploit.
why not conduct a risk assessment on the server and identify the control gaps?