Which of the following is the MOST intrusive type of testing against a production system?

White box testing describes the level of knowledge given to the tester (full internal access) rather than the intrusiveness of the test method, and it is not inherently more disruptive than active exploitation.

War dialing involves scanning phone numbers for connected modems and is far less intrusive than actively exploiting vulnerabilities on production systems.

Vulnerability testing identifies and catalogs potential weaknesses without actively attempting to exploit them, making it less intrusive than penetration testing.

Penetration testing goes beyond identifying vulnerabilities by actively attempting to exploit them using the same methods a real attacker would use against a live production system. This makes it the most intrusive type because active exploitation can cause service disruptions, data modification, or system instability on operational infrastructure. Unlike vulnerability scanning, a penetration test demonstrates actual exploitability and real-world impact rather than theoretical risk.