CVP interview question

How would you test a security control?