In vulnerability assessment and reverse engineering, Penetration testing mainly refers to:

A. penetration testing never uses scope B. penetration testing is only creating reports without testing C. penetration testing is always illegal D. penetration testing attempts controlled exploitation to prove real-world impact