312-50V10 · Question #521
Which of the following is a restriction being enforced in "white box testing?"
The correct answer is B. The internal operation of a system is completely known to the tester. White box testing grants the tester complete knowledge of a system's internal workings, distinguishing it from black box and gray box approaches.
Question
Which of the following is a restriction being enforced in "white box testing?"
Options
- AOnly the internal operation of a system is known to the tester
- BThe internal operation of a system is completely known to the tester
- CThe internal operation of a system is only partly accessible to the tester
- DOnly the external operation of a system is accessible to the tester
How the community answered
(39 responses)- A3% (1)
- B90% (35)
- C3% (1)
- D5% (2)
Why each option
White box testing grants the tester complete knowledge of a system's internal workings, distinguishing it from black box and gray box approaches.
Knowing only the internal operation without external context describes an incomplete scenario and does not match the definition of any standard testing type.
In white box testing, the tester has full visibility into the internal architecture, source code, logic, and structure of the system under test. This complete access allows the tester to design test cases that target specific code paths, branches, and internal components. It contrasts directly with black box testing where no internal knowledge is available.
Partial access to internal operations describes gray box testing, not white box testing.
Knowing only the external operation with no internal access is the definition of black box testing, not white box testing.
Concept tested: White box vs black box vs gray box testing
Source: https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies
Topics
Community Discussion
No community discussion yet for this question.