Which techniques does SP 800-115 place in the target vulnerability validation family? Choose three.

Answer: C. Password cracking.
D. Penetration testing.
A. Social engineering.

Target vulnerability validation techniques corroborate the existence of vulnerabilities and comprise password cracking, penetration testing, social engineering and application security testing. Ruleset review is a review technique.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.2 Technical Assessment Techniques