Pete, a developer, writes an application. Jane, the security analyst, knows some things about the overall application but does not have all the details. Jane needs to review the software before it…

The correct answer is A. Gray Box Testing. Testing methodologies are defined by the tester's level of knowledge: White Box (D) = full access to source code and internals; Black Box (B) = zero knowledge, testing as an outsider would; Gray Box (A) = partial knowledge of the system. Since Jane knows 'some things' but not…

Security operations

Question

Pete, a developer, writes an application. Jane, the security analyst, knows some things about the overall application but does not have all the details. Jane needs to review the software before it is released to production. Which of the following reviews should Jane conduct?

Options

AGray Box Testing
BBlack Box Testing
CBusiness Impact Analysis
DWhite Box Testing

How the community answered

(33 responses)

A
94% (31)
C
3% (1)
D
3% (1)

Explanation

Testing methodologies are defined by the tester's level of knowledge: White Box (D) = full access to source code and internals; Black Box (B) = zero knowledge, testing as an outsider would; Gray Box (A) = partial knowledge of the system. Since Jane knows 'some things' but not all the details, this fits Gray Box Testing exactly. A Business Impact Analysis (C) is an organizational risk assessment process, not a software testing methodology.

Topics

#gray box testing#software security review#application testing#partial knowledge testing

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice