Which of the following is the MOST effective method for assessing the effectiveness of a security awareness program?

A. Post-incident review
B. Social engineering test
C. Vulnerability scan
D. Tabletop test