Which includes penetration testing, vulnerability testing, access control testing, system resilience and recovery testing?

Which includes penetration testing, vulnerability testing, access control testing, system resilience and recovery testing?

• A. Cyber Risks
• B. Product Obsolescence
• C. Cyber Security Tests
• D. Supplier Dependence

Answer: (C)

Security testing of information systems includes a range of activities designed to identify weaknesses and verify defenses. Penetration testing simulates real attacks to see how far an intruder could go. Vulnerability testing scans for known flaws that could be exploited. Access control testing checks that authentication and authorization controls prevent unauthorized access. System resilience and recovery testing examines how well the system can continue operating during disruptions and how quickly it can recover, including backups and disaster recovery processes. Together, these activities define cyber security tests, focused on assessing and strengthening the security of IT systems. The other options describe risks or business concerns rather than the testing activities themselves: cyber risks are potential threats and impacts, product obsolescence relates to product life cycles, and supplier dependence concerns reliance on suppliers.

Security testing of information systems includes a range of activities designed to identify weaknesses and verify defenses. Penetration testing simulates real attacks to see how far an intruder could go. Vulnerability testing scans for known flaws that could be exploited. Access control testing checks that authentication and authorization controls prevent unauthorized access. System resilience and recovery testing examines how well the system can continue operating during disruptions and how quickly it can recover, including backups and disaster recovery processes. Together, these activities define cyber security tests, focused on assessing and strengthening the security of IT systems. The other options describe risks or business concerns rather than the testing activities themselves: cyber risks are potential threats and impacts, product obsolescence relates to product life cycles, and supplier dependence concerns reliance on suppliers.