nerdexam
EC-Council

312-50V10 · Question #521

Which of the following is a restriction being enforced in "white box testing?"

The correct answer is B. The internal operation of a system is completely known to the tester. White box testing grants the tester complete knowledge of a system's internal workings, distinguishing it from black box and gray box approaches.

Information Security and Ethical Hacking Fundamentals

Question

Which of the following is a restriction being enforced in "white box testing?"

Options

  • AOnly the internal operation of a system is known to the tester
  • BThe internal operation of a system is completely known to the tester
  • CThe internal operation of a system is only partly accessible to the tester
  • DOnly the external operation of a system is accessible to the tester

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    90% (35)
  • C
    3% (1)
  • D
    5% (2)

Why each option

White box testing grants the tester complete knowledge of a system's internal workings, distinguishing it from black box and gray box approaches.

AOnly the internal operation of a system is known to the tester

Knowing only the internal operation without external context describes an incomplete scenario and does not match the definition of any standard testing type.

BThe internal operation of a system is completely known to the testerCorrect

In white box testing, the tester has full visibility into the internal architecture, source code, logic, and structure of the system under test. This complete access allows the tester to design test cases that target specific code paths, branches, and internal components. It contrasts directly with black box testing where no internal knowledge is available.

CThe internal operation of a system is only partly accessible to the tester

Partial access to internal operations describes gray box testing, not white box testing.

DOnly the external operation of a system is accessible to the tester

Knowing only the external operation with no internal access is the definition of black box testing, not white box testing.

Concept tested: White box vs black box vs gray box testing

Source: https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies

Topics

#white box testing#penetration testing types#security testing methodologies

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice