CSSLP · Question #384
Which term can be best defined by the following description? A security testing method that is also known as structure-based testing. It involves the direct analysis of the source code and is a techni
The correct answer is D. White-box testing. White-box testing, also known as structure-based testing, involves examining the internal structure and source code of an application to verify its functionality and security.
Question
Which term can be best defined by the following description? A security testing method that is also known as structure-based testing. It involves the direct analysis of the source code and is a technique where the testers require knowledge of how the software is implemented and how it works.
Options
- AUnit testing
- BBlack-box testing
- CStress testing
- DWhite-box testing
How the community answered
(46 responses)- A2% (1)
- B4% (2)
- C2% (1)
- D91% (42)
Why each option
White-box testing, also known as structure-based testing, involves examining the internal structure and source code of an application to verify its functionality and security.
Unit testing focuses on individual components or modules of software in isolation, often performed by developers, but it's a type of testing, not the broad definition of knowing internal structure for security.
Black-box testing is a method where the tester has no knowledge of the internal workings or structure of the system, contrary to the description.
Stress testing evaluates a system's robustness and performance under extreme conditions, not its internal code structure.
White-box testing is a security testing method where the internal structure, design, and implementation of a system are known to the tester, allowing for direct analysis of source code and internal logic. This approach is effective for identifying vulnerabilities by scrutinizing the application's inner workings.
Concept tested: Software security testing types
Source: https://learn.microsoft.com/en-us/training/modules/introduction-devsecops/3-security-tests
Topics
Community Discussion
No community discussion yet for this question.