Red Teaming is best described as what?

• A. A defensive security program
• B. A compliance audit
• C. The use of offensive tactics to measure and improve defenses
• D. A vulnerability scanner configuration

Answer: (C)

Red Teaming is about using realistic offensive tactics to test and improve defenses. It mimics how real attackers would approach a target, attempting to breach perimeter controls, escalate privileges, move through networks, and exfiltrate data to see how well people, processes, and technology detect, respond to, and recover from incidents. The aim is to identify gaps that adversaries could exploit and to strengthen defenses based on those findings, not just to harden systems in isolation.

This differs from a defensive security program, which focuses on protecting systems and preventing breaches. It isn’t a compliance audit, which checks whether standards and regulations are being followed. It also isn’t a vulnerability scanner configuration, which automatically looks for known weaknesses without simulating attacker techniques or validating detection and response.