Adam works as a Professional Penetration Tester for Umbrella Inc. A project has been assigned to him to carry out a Black Box penetration testing as a regular evaluation of the system security and…

Question

Options

• ABlack box testing provides the testers with complete knowledge of the infrastructure to be tested.
• BBlack box testing simulates an attack from someone who is familiar with the system.
• CBlack box testing simulates an attack from someone who is unfamiliar with the system.
• DBlack box testing assumes no prior knowledge of the infrastructure to be tested.

• A
  6% (2)
• B
  3% (1)
• C
  91% (30)

Explanation

Black box penetration testing simulates a real-world external attack where the tester has no prior knowledge of the target infrastructure (D). This mirrors the perspective of an outsider or attacker who is completely unfamiliar with the system (C). Option A is false - complete knowledge describes white box testing, not black box. Option B is false - familiarity with the system describes gray box or white box testing. Black box is the most realistic simulation of an opportunistic external threat actor.

No community discussion yet for this question.