Q271: Which of the following authorities is mandatory to conduct the Vulnerability Assessment, Penetration Testing, and Security Audit of the V-CIP infrastructure?

The bank's internal IT audit team.

Any ISO 27001 certified external auditor.

The empanelled auditors of Indian Computer Emergency Response Team (CERT-In).

The Reserve Bank of India's IT subsidiary.

✅ Correct Answer: C

The empanelled auditors of Indian Computer Emergency Response Team (CERT-In) shall conduct such tests.

Bank Promotion Exam Guide