Penetration testing is a simulated attack on an organization's system that identifies vulnerabilities, attempts to exploit them, and validates the effectiveness of an organization's security controls. Therefore, all the options are correct.