nerdexam
GIAC

GSLC · Question #557

Which of the following terms describes the statement given below? "It provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code…

The correct answer is C. White box penetration testing. White box penetration testing is defined by the tester receiving full knowledge of the target infrastructure, including diagrams, source code, and addressing details.

Security Architecture & Engineering

Question

Which of the following terms describes the statement given below? "It provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code, and IP addressing information."

Options

  • ABackTrack
  • BGFI LANguard
  • CWhite box penetration testing
  • DBlack box penetration testing

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    86% (31)
  • D
    8% (3)

Why each option

White box penetration testing is defined by the tester receiving full knowledge of the target infrastructure, including diagrams, source code, and addressing details.

ABackTrack

BackTrack is a Linux-based penetration testing distribution (predecessor to Kali Linux) used as a toolset, not a classification of testing methodology based on knowledge level.

BGFI LANguard

GFI LANguard is a commercial network vulnerability scanner and patch management tool, not a penetration testing approach or knowledge-level classification.

CWhite box penetration testingCorrect

White box penetration testing explicitly grants testers complete knowledge of the environment, including network diagrams, IP schemes, and source code. This simulates an insider threat or a scenario where the attacker has already obtained internal documentation. It contrasts directly with black box testing where no prior knowledge is given.

DBlack box penetration testing

Black box penetration testing is the opposite - testers receive no prior knowledge of the target infrastructure, simulating an external attacker starting from scratch.

Concept tested: White box vs black box penetration testing methodology

Source: https://csrc.nist.gov/glossary/term/white_box_testing

Topics

#white box testing#penetration testing types#security assessment#network diagrams

Community Discussion

No community discussion yet for this question.

Full GSLC Practice