A vulnerability test on an Information System (IS) is conducted to
A.
exploit security weaknesses in the IS.
B.
measure system performance on systems with weak security controls.
C.
evaluate the effectiveness of security controls.
D.
prepare for Disaster Recovery (DR) planning.