Dion Training wants to get an external attacker's perspective on its security status. Which of the following services should they purchase?
1) Vulnerability scan
2) Patch management
3) Penetration test
4) Asset management