A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT? 

Answer options:

A. Halt the penetration test.
B. Conduct an incident response.
C. Deconflict with the penetration tester.
D. Assume the alert is from the penetration test.

B