Which of the following penetration tests would MOST effectively evaluate incident handling and
response capabilities of an organization?

A.
Targeted testing

B.
External testing

C.
internal testing

D.
Double-blind testing

Explanation:
In a double-blind test, the administrator and security staff are not aware of the test, which will result
in an assessment of the incident handling and response capability in an organization. In targeted,
external, and internal testing, the system administrator and security staff are aware of the tests
since they are informed before the start of the tests.