Varghese has just returned from a meeting with senior management. The management team is concerned that the current systems in place may not be identifying all of the weaknesses that exist in the current infrastructure and want to determine to what extent the company could be attacked. Which of the following might Varghese decide to employ in making this determination?

a$.$ honeypot

b$.$ penetration test

c$.$ security audit

d$.$ vulnerability scan