A quality assurance analyst is reviewing a new software product for security, and has complete access to the code and data structures used by the developers. This is an example of which of the followi

Black box testing gives the tester no access to internal code or structures and relies only on external interaction with the application's interface.

Penetration testing describes the goal of simulating an attack against a system and can be conducted under any knowledge level - it is a methodology, not a knowledge-classification type.

Gray box testing grants only partial knowledge of the system's internals, such as limited documentation or user-level credentials, not complete access as described.

White box testing, also called clear-box or glass-box testing, provides the tester with complete knowledge of the application's internals, including source code, APIs, and data structures. This allows deep analysis of logic flaws, insecure code paths, and structural vulnerabilities that would be invisible to an external tester. The scenario explicitly states the analyst has complete access to code and data structures, which is the defining characteristic of white box testing.