GSLC · Question #475
Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcomings of the present…
The correct answer is A. Black-box testing. Black-box testing simulates an external attacker with zero prior knowledge of the network, making it the standard approach for objective external vulnerability assessments.
Question
Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcomings of the present network infrastructure. Which of the following testing approaches will she apply to accomplish this task?
Options
- ABlack-box testing
- BWhite-box testing
- CUnit testing
- DGray-box testing
How the community answered
(38 responses)- A87% (33)
- B3% (1)
- C3% (1)
- D8% (3)
Why each option
Black-box testing simulates an external attacker with zero prior knowledge of the network, making it the standard approach for objective external vulnerability assessments.
Black-box testing is a network security testing approach where the tester has no prior knowledge of the internal network architecture, configurations, or systems, simulating a real-world external attacker scenario. This is the appropriate methodology for identifying vulnerabilities exploitable from outside the organization without internal bias. Maria, as a recently appointed administrator with limited familiarity, would apply this approach to objectively evaluate the network's external security posture.
White-box testing provides the tester with full knowledge of the network including architecture and source code, which is used for thorough internal audits rather than simulating external threats.
Unit testing is a software development practice for testing individual code components in isolation and is not a recognized network security testing methodology.
Gray-box testing involves partial knowledge of the network environment and represents a middle ground between black-box and white-box, typically used when some internal information is deliberately shared with the tester.
Concept tested: Black-box network security penetration testing
Source: https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies
Topics
Community Discussion
No community discussion yet for this question.