Which of the following components should be executed by an outside vendor?

exams CAS-003 CAS-003 exam 0 Comments

A Chief Information Security Officer (CISO) is running a test to evaluate the security of the corporate network and attached devices.

Which of the following components should be executed by an outside vendor?
A . Penetration tests
B . Vulnerability assessment
C . Tabletop exercises
D . Blue-team operations

Answer: A