To evaluate the security compliance of a group of servers against best practices, which of the following BEST applies?

A.
Get a patch management report.

B.
Conduct a penetration test.

C.
Run a vulnerability assessment tool.

D.
Install a protocol analyzer.