CAS-003 · Question #249
To prepare for an upcoming audit, the Chief Information Security Officer (CISO) asks for all 1200 vulnerabilities on production servers to be remediated. The security engineer must determine which…
The correct answer is C. Black box. Black box testing simulates the perspective of an external attacker who has no insider knowledge of the target environment. The tester approaches the system from the outside, just as a real threat actor would, relying on discovered information (like vulnerability scan results)…
Question
To prepare for an upcoming audit, the Chief Information Security Officer (CISO) asks for all 1200 vulnerabilities on production servers to be remediated. The security engineer must determine which vulnerabilities represent real threats that can be exploited so resources can be prioritized to migrate the most dangerous risks. The CISO wants the security engineer to act in the same manner as would an external threat, while using vulnerability scan results to prioritize any actions. Which of the following approaches is described?
Options
- ABlue team
- BRed team
- CBlack box
- DWhite team
How the community answered
(28 responses)- A4% (1)
- C89% (25)
- D7% (2)
Explanation
Black box testing simulates the perspective of an external attacker who has no insider knowledge of the target environment. The tester approaches the system from the outside, just as a real threat actor would, relying on discovered information (like vulnerability scan results) to identify and prioritize exploitable weaknesses. This contrasts with white box (full knowledge) and gray box (partial knowledge). A red team is a broader adversarial simulation exercise, often involving physical and social engineering components. The question specifically describes the external-threat perspective with no assumed internal knowledge, which is the definition of black box.
Topics
Community Discussion
No community discussion yet for this question.