GSLC · Question #557
Which of the following terms describes the statement given below? "It provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code…
The correct answer is C. White box penetration testing. White box penetration testing is defined by the tester receiving full knowledge of the target infrastructure, including diagrams, source code, and addressing details.
Question
Which of the following terms describes the statement given below? "It provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code, and IP addressing information."
Options
- ABackTrack
- BGFI LANguard
- CWhite box penetration testing
- DBlack box penetration testing
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- C86% (31)
- D8% (3)
Why each option
White box penetration testing is defined by the tester receiving full knowledge of the target infrastructure, including diagrams, source code, and addressing details.
BackTrack is a Linux-based penetration testing distribution (predecessor to Kali Linux) used as a toolset, not a classification of testing methodology based on knowledge level.
GFI LANguard is a commercial network vulnerability scanner and patch management tool, not a penetration testing approach or knowledge-level classification.
White box penetration testing explicitly grants testers complete knowledge of the environment, including network diagrams, IP schemes, and source code. This simulates an insider threat or a scenario where the attacker has already obtained internal documentation. It contrasts directly with black box testing where no prior knowledge is given.
Black box penetration testing is the opposite - testers receive no prior knowledge of the target infrastructure, simulating an external attacker starting from scratch.
Concept tested: White box vs black box penetration testing methodology
Source: https://csrc.nist.gov/glossary/term/white_box_testing
Topics
Community Discussion
No community discussion yet for this question.