Matt, the Chief Information Security Officer (CISO), tells the network administrator that a security company has been hired to perform a penetration test against his network. The security company…

Providing all network ranges, security devices, and logical maps describes white box (clear box) testing, where testers have full knowledge of the environment.

Black box testing means the penetration testers are given no prior information about the target network, its architecture, IP ranges, security controls, or physical locations. This approach most accurately simulates a real-world external attacker who must perform all reconnaissance from scratch. The lack of provided information forces testers to discover everything themselves, providing the most realistic assessment of external attack exposure.

Providing limited information including network diagrams describes gray box testing, a hybrid approach between black and white box.

Providing limited information including some subnet ranges also describes gray box testing, not a true black box engagement.