Which of the following techniques would be the BEST test of security effectiveness?

A. Performing an external penetration test
B. Reviewing security policies and standards
C. Reviewing security logs
D. Analyzing technical security practices