The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Operational Audit and are describing it to your
coworkers. Which of the following best describes an Operational audit?

A.
This type of audit is typically done by a contracted external team of security experts who check
for policy compliance.

B.
This type of audit is usually done by internal resources to examine the current daily and on-going activities within a network system for compliance with an established security policy.

C.
This type of audit is typically done by an internal team who ensures the security measures are
up to international standards.

D.
This type of audit is usually done by the current network administrators who ensure the security
measures are up to international standards.

E.
This type of audit is usually conducted by external resources and may be a review or audit of
detailed audit logs.