types of GCP penetration testing