Question 1 1 try left Which of the following statements is(are) true? A. Penetration tests show whether it is possible to break into a system. B. Penetration tests seldom succeed. C. Penetration tests are authorized attacks. D. Vulnerability scanning is an alternative to penetration testing. Try again. Which of the following statements is(are) true? (Check all that apply.) A. Good change management and change control eliminates the need for penetration tests. B. Good change management and change control results in better operating performance by reducing the number of problems that need to be fixed. C. Good change management and change control reduces the costs incurred when a security incident happens. D. Good change management and change control increases the number of "emergency" changes needed. Which of the following statements is(are) true? (Check all that apply.) A. An increase in the number of emergency changes is an indicator that the change management and change control process is functioning well. B. Emergency changes do not need to be documented. C. Changes should be tested in a system separate from the one used for daily business processes. D. It is important t update system documentation after a change has been approved