Due to compliance regulations, a company requires a yearly penetration test. The Chief Information Security
Officer (CISO) has asked that it be done under a black box methodology. Which of the following would be the
advantage of conducting this kind of penetration test?

A.
The risk of unplanned server outages is reduced.

B.
Using documentation provided to them, the pen-test organization can quickly determine areas to focus on.

C.
The results will show an in-depth view of the network and should help pin-point areas of internal weakness.

D.
The results should reflect what attackers may be able to learn about the company.