In regards to vulnerability testing, what would an organization expect to gain from having a "covert" penetration test conducted versus an "overt" penetration test? Should an organization conduct both? If so, which order should they be conducted and why? Please provide a response with a minimum of 250 words.