Regarding the security test, may I carry out the action to confirm whether vulnerability is exploitable or not (a penetration test) ? Or may I carry out only the detection of the vulnerability (vulnerability diagnosis) ?
Regarding the security test, will it be alright to do something to confirm if the vulnerability is exploitable (penetration test)? And is it enough to discover the vulnerability only (vulnerability diagnosis)?
