CISA Certified Information Systems Auditor – Question2123

Which of the following is the GREATEST advantage of application penetration testing over vulnerability scanning?

A.
Penetration testing does not require a special skill set to be executed.
B. Penetration testing provides a more accurate picture of gaps in application controls.
C. Penetration testing can be conducted in a relatively short time period.
D. Penetration testing creates relatively smaller risks to application availability and integrity.

Correct Answer: B