CGRC · Question #381
Focused testing is a test methodology that assumes some knowledge of the internal structure and implementation detail of the assessment object. This type of testing is also known as: Response:
The correct answer is B. Gray box testing. Gray box testing, also known as focused testing, involves some knowledge of the internal structure and implementation details of the system under assessment.
Question
Focused testing is a test methodology that assumes some knowledge of the internal structure and implementation detail of the assessment object. This type of testing is also known as:
Response:
Options
- AWhite box testing
- BGray box testing
- CPenetration testing
- DBlack box testing
How the community answered
(30 responses)- A3% (1)
- B87% (26)
- C3% (1)
- D7% (2)
Why each option
Gray box testing, also known as focused testing, involves some knowledge of the internal structure and implementation details of the system under assessment.
White box testing involves full knowledge of the internal structure and implementation, which is more extensive than 'some knowledge' described by focused testing.
Gray box testing is a software testing technique that combines elements of both black box testing (external perspective) and white box testing (internal perspective), where the tester has partial knowledge of the system's internal workings. This partial knowledge allows for more focused testing efforts on specific areas, aligning with the definition of 'focused testing' which assumes 'some knowledge of the internal structure and implementation detail'.
Penetration testing is a type of security test aimed at finding vulnerabilities, rather than a category defined by the extent of internal system knowledge.
Black box testing involves no knowledge of the internal structure or implementation details, directly contradicting the premise of having 'some knowledge'.
Concept tested: Software testing methodologies
Source: https://www.nist.gov/privacy-framework/nist-sp-800-115
Topics
Community Discussion
No community discussion yet for this question.