You are considering engaging a third party penetration test. Which of the following statements about penetration tests is TRUE?

Group of answer choices

1. a well-conducted penetration test can transcend internal politics and help convince senior management of the seriousness of security issues

2. if you have fully implemented an effective and mature security strategy, the penetration testers are unlikely to succeed in their attempts to compromise your organization

3. when you engage the penetration testing vendor, its usually best to leave the scope and boundaries of the test undefined so that the testers can take the attack as far as they can, like a real attacker would

4. when the vendor presents their results in the wrap up meeting, this is a good time to call out operational teams for failing to secure their systems