A company wants to assess the effectiveness of its security measures by simulating an attack on its network. Which type of assessment would BEST satisfy this requirement?
Conducting a vulnerability assessment
Reviewing security policies and procedures
Performing a security audit
Conducting a penetration test