Which of the following is the MOST effective strategy for penetration testers assessing the security...

AAISM identifies confidence-score analysis as a principal technique for evaluating exposure to membership inference: models often yield measurably higher confidence for points seen during training. Testers compare output probabilities/entropies for known in-training vs. out-of-training samples to assess leakage. Disabling logs (A) reduces evidence; test-set accuracy (B) does not measure privacy leakage; synthetic data generation (D) is a mitigation strategy, not a penetration-testing method.