The PRIMARY purpose of performing an internal attack and penetration test as part of an incident response program is to identify:

A. weaknesses in network and server security.
B. ways to improve the incident response process.
C. potential attack vectors on the network perimeter.
D. the optimum response to internal hacker attacks.