Exam CISSP topic 1 question 459 discussion

Straight B

The correct answer is B. Security audit. A security audit is the process of comparing the actual security measures and controls in place against a defined standard or set of criteria. The purpose of an audit is to determine whether the organization meets the required security standards and to identify any gaps or areas of non-compliance. While other options like penetration tests or security assessments may involve evaluating security measures, a security audit specifically involves comparing results to a predefined standard.