CompTIA Network+ (N10-007) — Question 86

A company hires another firm to test the integrity of its information security controls. This is an example of:

Answer options

• A. role separation
• B. device hardening
• C. risk assessment
• D. penetration testing

Correct answer: D

Explanation

The correct answer is D, penetration testing, as it involves simulating attacks to identify vulnerabilities in security controls. A is incorrect because role separation refers to dividing responsibilities to reduce risk, B is not applicable since device hardening involves securing individual devices, and C does not fit as risk assessment is a broader evaluation of potential risks rather than testing security controls.