An IS auditor doing penetration testing during an audit of Internet connections would: 
A、evaluate configurations. 
B、examine security settings. 
C、ensure virus-scanning software is in use. 
D、use tools and techniques available to a hacker.