nerdexam
GIAC

GSLC · Question #475

Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcomings of the present…

The correct answer is A. Black-box testing. Black-box testing simulates an external attacker with zero prior knowledge of the network, making it the standard approach for objective external vulnerability assessments.

Security Operations & Incident Response Leadership

Question

Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcomings of the present network infrastructure. Which of the following testing approaches will she apply to accomplish this task?

Options

  • ABlack-box testing
  • BWhite-box testing
  • CUnit testing
  • DGray-box testing

How the community answered

(38 responses)
  • A
    87% (33)
  • B
    3% (1)
  • C
    3% (1)
  • D
    8% (3)

Why each option

Black-box testing simulates an external attacker with zero prior knowledge of the network, making it the standard approach for objective external vulnerability assessments.

ABlack-box testingCorrect

Black-box testing is a network security testing approach where the tester has no prior knowledge of the internal network architecture, configurations, or systems, simulating a real-world external attacker scenario. This is the appropriate methodology for identifying vulnerabilities exploitable from outside the organization without internal bias. Maria, as a recently appointed administrator with limited familiarity, would apply this approach to objectively evaluate the network's external security posture.

BWhite-box testing

White-box testing provides the tester with full knowledge of the network including architecture and source code, which is used for thorough internal audits rather than simulating external threats.

CUnit testing

Unit testing is a software development practice for testing individual code components in isolation and is not a recognized network security testing methodology.

DGray-box testing

Gray-box testing involves partial knowledge of the network environment and represents a middle ground between black-box and white-box, typically used when some internal information is deliberately shared with the tester.

Concept tested: Black-box network security penetration testing

Source: https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies

Topics

#black-box testing#penetration testing#vulnerability assessment#network security testing

Community Discussion

No community discussion yet for this question.

Full GSLC Practice