nerdexam
CompTIA

SY0-301 · Question #341

A process in which the functionality of an application is tested without any knowledge of the internal mechanisms of the application is known as:

The correct answer is A. Black box testing. Black box testing evaluates an application's functionality based solely on inputs and outputs, with no knowledge of the internal code or architecture.

Security operations

Question

A process in which the functionality of an application is tested without any knowledge of the internal mechanisms of the application is known as:

Options

  • ABlack box testing
  • BWhite box testing
  • CBlack hat testing
  • DGray box testing

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • D
    4% (1)

Why each option

Black box testing evaluates an application's functionality based solely on inputs and outputs, with no knowledge of the internal code or architecture.

ABlack box testingCorrect

Black box testing is defined as testing a system or application without any knowledge of its internal implementation details, relying only on external interfaces and observable behavior. This matches the question description exactly. It is used to validate functionality from an end-user or attacker perspective without access to source code.

BWhite box testing

White box testing requires full knowledge of the internal code and architecture, which is the opposite of the scenario described.

CBlack hat testing

Black hat testing refers to malicious hacking performed without authorization, not a formal software testing methodology.

DGray box testing

Gray box testing involves partial knowledge of internal mechanisms, meaning the tester has some but not full visibility into the system's internals.

Concept tested: Black box vs white box testing methodology

Source: https://csrc.nist.gov/glossary/term/black_box_testing

Topics

#black box testing#application testing#security assessment#penetration testing

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice