Which term describes the practice of using computer attack techniques with permission to find security flaws and improve security?

• A. Hacker
• B. Penetration Tester
• C. Security Auditor
• D. Ethical Hacker

Answer: (D)

The main idea is authorized attacker-style testing used to uncover vulnerabilities and strengthen defenses. The best term for this practice is Ethical Hacker because it explicitly describes someone who applies attacker techniques with explicit permission and a goal of improving security. The permission and ethical framework distinguish this work from unauthorized hacking. A penetration tester is closely related and focuses on performing tests, but the term Ethical Hacker highlights the ethical boundary and consent more clearly. A security auditor emphasizes reviews of policies and controls and may not involve active exploitation.