nerdexam
(ISC)2

CAP · Question #295

Which of the following is NOT a type of penetration test?

The correct answer is A. Cursory test. The three recognized types of penetration tests based on tester knowledge are: Zero-knowledge (black-box) - the tester has no prior information about the target; Partial-knowledge (gray-box) - the tester has limited information; and Full-knowledge (white-box) - the tester has com

Assessment/Audit of Security and Privacy Controls

Question

Which of the following is NOT a type of penetration test?

Options

  • ACursory test
  • BPartial-knowledge test
  • CZero-knowledge test
  • DFull knowledge test

How the community answered

(30 responses)
  • A
    90% (27)
  • B
    3% (1)
  • D
    7% (2)

Explanation

The three recognized types of penetration tests based on tester knowledge are: Zero-knowledge (black-box) - the tester has no prior information about the target; Partial-knowledge (gray-box) - the tester has limited information; and Full-knowledge (white-box) - the tester has complete documentation and access. 'Cursory test' is not a recognized category of penetration testing; it is a fabricated distractor.

Topics

#Penetration testing#Security testing types#Black box testing#White box testing

Community Discussion

No community discussion yet for this question.

Full CAP Practice