Which statement best describes Penetration testing?

A. penetration testing attempts controlled exploitation to prove real-world impact B. penetration testing never uses scope C. penetration testing is only creating reports without testing D. penetration testing is always illegal