312-50V9 · Question #391
Which of the following is a restriction being enforced in "white box testing?"
The correct answer is B. The internal operation of a system is completely known to the tester. White box testing grants the tester complete knowledge of a system's internal workings, including source code, architecture, and logic.
Question
Which of the following is a restriction being enforced in "white box testing?"
Options
- AOnly the internal operation of a system is known to the tester
- BThe internal operation of a system is completely known to the tester
- CThe internal operation of a system is only partly accessible to the tester
- DOnly the external operation of a system is accessible to the tester
How the community answered
(49 responses)- A4% (2)
- B92% (45)
- C2% (1)
- D2% (1)
Why each option
White box testing grants the tester complete knowledge of a system's internal workings, including source code, architecture, and logic.
Knowing only the internal operation without external context describes a partial view, not the defining characteristic of white box testing.
In white box testing, the tester has full and unrestricted access to the internal structure, code, and design of the system under test. This allows the tester to craft test cases based on implementation details, logic paths, and internal data flows. It contrasts with black box testing where only external behavior is observed.
Partial access to internal operations describes grey box testing, which combines elements of both black and white box approaches.
Access only to external operation defines black box testing, where internal implementation is hidden from the tester.
Concept tested: White box vs black box testing methodology
Source: https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies
Topics
Community Discussion
No community discussion yet for this question.