Which term best describes a person who conducts authorized security testing to identify vulnerabilities?

Which term best describes a person who conducts authorized security testing to identify vulnerabilities?

• A. Authorized
• B. Hacker
• C. Shadow IT
• D. Unskilled attacker

Answer: (A)

The key idea here is authorization and legitimacy in security testing. A person who conducts security testing on a system does so with explicit permission from the owner, within an agreed scope, to identify vulnerabilities and help improve defenses. The term that best captures this legitimate, permitted role is Authorized, because it directly signals that the tester has the proper approval to perform the assessment. In contrast, just calling someone a hacker can imply unauthorized activity, which would violate laws and ethics. Shadow IT refers to systems or processes built outside the official channel, which is about unsanctioned technology rather than the tester’s authorization. An unskilled attacker suggests capability or intent, not the crucial factor of permission.

The key idea here is authorization and legitimacy in security testing. A person who conducts security testing on a system does so with explicit permission from the owner, within an agreed scope, to identify vulnerabilities and help improve defenses. The term that best captures this legitimate, permitted role is Authorized, because it directly signals that the tester has the proper approval to perform the assessment.

In contrast, just calling someone a hacker can imply unauthorized activity, which would violate laws and ethics. Shadow IT refers to systems or processes built outside the official channel, which is about unsanctioned technology rather than the tester’s authorization. An unskilled attacker suggests capability or intent, not the crucial factor of permission.