nerdexam
(ISC)2

CGRC · Question #414

Basic testing is a test methodology that assumes no knowledge of the internal structure and implementation detail of the assessment objet. This type of testing is also known as: Response:

The correct answer is C. Black box testing. Black box testing is a testing methodology where the tester has no knowledge of the internal structure, design, or implementation details of the system under assessment.

Assessment/Audit of Security and Privacy Controls

Question

Basic testing is a test methodology that assumes no knowledge of the internal structure and implementation detail of the assessment objet. This type of testing is also known as:

Response:

Options

  • AGray box testing
  • BWhite box testing
  • CBlack box testing
  • DPenetration testing

How the community answered

(43 responses)
  • A
    7% (3)
  • B
    5% (2)
  • C
    86% (37)
  • D
    2% (1)

Why each option

Black box testing is a testing methodology where the tester has no knowledge of the internal structure, design, or implementation details of the system under assessment.

AGray box testing

Gray box testing involves limited knowledge of the internal structure, combining aspects of both black box and white box testing.

BWhite box testing

White box testing requires full knowledge of the internal structure, code, and design of the system to test internal logic and vulnerabilities.

CBlack box testingCorrect

Black box testing, also known as external or functional testing, specifically assumes no prior knowledge of the internal workings, code, or infrastructure of the system being tested. Testers interact with the system solely through its external interfaces, simulating a real-world attacker who has no insider information.

DPenetration testing

Penetration testing is a broader term for simulating attacks to find vulnerabilities; it can employ black, white, or gray box approaches, but "basic testing with no internal knowledge" is specifically black box.

Concept tested: Software testing methodologies (Black box)

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing

Topics

#Black box testing#Testing methodologies#Security testing

Community Discussion

No community discussion yet for this question.

Full CGRC Practice