A city wants to treat continuous vulnerability scanning as continuous penetration testing and cancel periodic adversarial assessments. What should the tester advise?
Select an answer to reveal the explanation.
Short Explanation
Daily tooth-brushing is not the same as a dental exam with X-rays. Keep the scanners humming for hygiene, and still schedule real pentests that try to break in under the rules.
Full Explanation
Continuous scanning strengthens vulnerability-management hygiene by catching new CVEs and drift quickly. Penetration testing periodically simulates an adversary chaining weaknesses under agreed rules. One does not substitute for the other; programs need both cadences.