Red team exercises differ from traditional penetration testing in their approach and scope.

True. Red team exercises are broader, longer-term engagements that test the entire security program, including people and processes, not just technical vulnerabilities.