Internal threat assessments and pen tests can give a false sense of the overall security posture of the organization. Why would this be true? Group of answer choices a$.$ Internal testers will have some knowledge about the targets and infrastructure. b$.$ External attackers do not know as much as the internal tester and therefore they are less of a threat. c$.$ Internal testers cannot attack from the outside of a network. d$.$ External attackers must spend extra time gathering information and because of this they can be stopped easily while gathering that information.