Which term tests security by simulating attacker techniques?

Which term tests security by simulating attacker techniques?

• A. Risk gap
• B. Penetration test
• C. Root cause analysis
• D. KPI

Answer: (B)

Penetration testing evaluates security by simulating attacker techniques. By acting as a real attacker with permission, testers probe networks, applications, and controls to uncover exploitable weaknesses before malicious actors do. This hands-on approach shows how far an intruder could penetrate, what data could be at risk, and how effective current defenses and incident response are. It provides actionable findings for remediation and validation of security controls, unlike risk gap analysis, which identifies gaps without necessarily attempting exploits, or root cause analysis, which looks backward after an incident. KPI measures performance, not the testing method itself. Because it mirrors attacker behavior to assess and improve defenses, this approach is the best fit.

Penetration testing evaluates security by simulating attacker techniques. By acting as a real attacker with permission, testers probe networks, applications, and controls to uncover exploitable weaknesses before malicious actors do. This hands-on approach shows how far an intruder could penetrate, what data could be at risk, and how effective current defenses and incident response are. It provides actionable findings for remediation and validation of security controls, unlike risk gap analysis, which identifies gaps without necessarily attempting exploits, or root cause analysis, which looks backward after an incident. KPI measures performance, not the testing method itself. Because it mirrors attacker behavior to assess and improve defenses, this approach is the best fit.