Eric manages his organization’s internal security team and wants to leverage a penetration test as part of his team’s testing that allows them to respond to simulated attacks. What type of model best describes this?

Defensive penetration testing seeks to allow the organization to learn as defenders. Offen- sive penetration testing involves acting like attackers, including nation-state actors with advanced capabilities like those described in this question. Physical security testing involves testing an organization’s physical security defenses and practices, including guards, locks and doors, and other physical security components like access control vestibules. Integrated pene- tration testing combines both.