CISM Certified Information Security Manager – Question1221

Which of the following is the PRIMARY reason to avoid alerting certain users of an upcoming penetration test?

A.
To prevent exploitation by malicious parties
B. To aid in the success of the penetration
C. To evaluate detection and response capabilities
D. To reduce the scope and duration of the test

Correct Answer: C