A security analyst is asked to conduct a security audit to identify vulnerabilities. Which security domain is this task related to?

A. Security assessment and testing
B. Communication and network security
C. Software development security
D. Security architecture and engineering