Network Security Layers

Standard security management practice is to test security to confirm proper configuration, performance, and strength against attacks and exploits. When a firewall is updated or its settings modified, another round of firewall testing should be conducted. Some approaches to firewall testing that do not disrupt the production environment are: Simulated firewall tests: Use an attack simulator to transmit attack packets to the firewall Virtual firewall tests: Are performed in a virtualized network environment using a virtualization tool Laboratory tests: Are run in nonproduction subnets on a duplicate of the production environment Answer the following question(s): Which approach do you think would be most effective? Why?