nerdexam
(ISC)2

CISSP · Question #643

Which testing method requires very limited or no information about the network infrastructure?

The correct answer is C. Black box. The testing method that requires very limited or no information about the network infrastructure is black box. Black box is a type of testing method that treats the system or network as a black box, meaning that the tester has no or minimal knowledge of the internal structure, de

Submitted by tom_us· Mar 5, 2026Security Assessment and Testing

Question

Which testing method requires very limited or no information about the network infrastructure?

Options

  • AWhile box
  • BStatic
  • CBlack box
  • DStress

How the community answered

(27 responses)
  • B
    7% (2)
  • C
    89% (24)
  • D
    4% (1)

Explanation

The testing method that requires very limited or no information about the network infrastructure is black box. Black box is a type of testing method that treats the system or network as a black box, meaning that the tester has no or minimal knowledge of the internal structure, design, or configuration of the system or network. Black box testing focuses on the functionality and behavior of the system or network, rather than the implementation or logic of the system or network. Black box testing can help to simulate the perspective and actions of an external attacker, who may not have access to the detailed information about the system or network, and who may exploit the vulnerabilities or weaknesses of the system or network based on the inputs and outputs of the system or network. Black box testing can also help to identify the unexpected or unintended results or errors of the system or network, as well as to measure the performance and usability of the system or network. White box, static, or stress are not the testing methods that require very limited or no information about the network infrastructure, as they are either more comprehensive, analytical, or intensive testing methods that involve the knowledge or examination of the internal structure, design, or configuration of the system or network.

Topics

#penetration testing#black box testing#testing methodologies

Community Discussion

No community discussion yet for this question.

Full CISSP Practice