Câu 221: Isaca Certified in Risk and Information Systems Control

To reduce the risk introduced when conducting penetration tests, the BEST mitigating control would be to:

1. A. clearly define the project scope — đáp án hiện tại
2. B. perform background checks on the vendor
3. C. notify network administrators before testing
4. D. require the vendor to sign a nondisclosure agreement (NDA)