The PRIMARY reason for periodic penetration testing of Internet-facing applications is to:

A. verify Internet firewall control settings.

B. ensure policy and regulatory compliance.

C. identify vulnerabilities in the system.

D. assess the proliferation of new threats.








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.