nerdexam
(ISC)2

CSSLP · Question #384

Which term can be best defined by the following description? A security testing method that is also known as structure-based testing. It involves the direct analysis of the source code and is a techni

The correct answer is D. White-box testing. White-box testing, also known as structure-based testing, involves examining the internal structure and source code of an application to verify its functionality and security.

Secure Software Testing

Question

Which term can be best defined by the following description? A security testing method that is also known as structure-based testing. It involves the direct analysis of the source code and is a technique where the testers require knowledge of how the software is implemented and how it works.

Options

  • AUnit testing
  • BBlack-box testing
  • CStress testing
  • DWhite-box testing

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    2% (1)
  • D
    91% (42)

Why each option

White-box testing, also known as structure-based testing, involves examining the internal structure and source code of an application to verify its functionality and security.

AUnit testing

Unit testing focuses on individual components or modules of software in isolation, often performed by developers, but it's a type of testing, not the broad definition of knowing internal structure for security.

BBlack-box testing

Black-box testing is a method where the tester has no knowledge of the internal workings or structure of the system, contrary to the description.

CStress testing

Stress testing evaluates a system's robustness and performance under extreme conditions, not its internal code structure.

DWhite-box testingCorrect

White-box testing is a security testing method where the internal structure, design, and implementation of a system are known to the tester, allowing for direct analysis of source code and internal logic. This approach is effective for identifying vulnerabilities by scrutinizing the application's inner workings.

Concept tested: Software security testing types

Source: https://learn.microsoft.com/en-us/training/modules/introduction-devsecops/3-security-tests

Topics

#Security testing#White-box testing#Structure-based testing#Source code analysis

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice