nerdexam
(ISC)2(ISC)2

CSSLP · Question #328

CSSLP Question #328: Real Exam Question with Answer & Explanation

The correct answer is D: Graybox testing. Graybox testing is a method where the test engineer possesses some knowledge of the system's internal structure or design, using this partial insight to create more effective test cases without full code access.

Secure Software Testing

Question

In which of the following testing methods is the test engineer equipped with the knowledge of system and designs test cases or test data based on system knowledge?

Options

  • AIntegration testing
  • BRegression testing
  • CWhitebox testing
  • DGraybox testing

Explanation

Graybox testing is a method where the test engineer possesses some knowledge of the system's internal structure or design, using this partial insight to create more effective test cases without full code access.

Common mistakes.

  • A. Integration testing focuses on verifying the interfaces and interactions between different modules or components of a system, not on the level of internal knowledge used to design test cases.
  • B. Regression testing involves re-executing existing test cases after changes to ensure that new code has not introduced new bugs or broken existing functionality.
  • C. Whitebox testing requires full knowledge of the system's internal code structure and implementation details, which is more extensive than 'knowledge of system' typically implies in the context of distinguishing from graybox.

Concept tested. Graybox testing methodology

Topics

#Software Testing Types#Graybox Testing#Test Engineer Knowledge#Secure Software Testing

Community Discussion

No community discussion yet for this question.

Full CSSLP PracticeBrowse All CSSLP Questions