Question $2$

When evaluating the services of a vendor company, what can be used to assess their security capabilities? Check all that apply.

$1$ point

Assume that they're using industry$-$standard solutions

Ask the vendor to complete a questionnaire

Ask them to provide any penetration testing or security assessment reports

Request full access to the vendor systems to perform an assessment