When should a technician perform penetration testing