An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best…

The correct answer is A. Partially known environment. A partially known environment is a type of penetration test where the tester has some information about the target, such as the IP address, the operating system, or the device type. This can help the tester focus on specific vulnerabilities and reduce the scope of the test. A…

Submitted by haruto_sh· Mar 6, 2026Security Operations

Question

An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?

Options

APartially known environment
BUnknown environment
CIntegrated
DKnown environment

How the community answered

(39 responses)

A
92% (36)
B
3% (1)
C
3% (1)
D
3% (1)

Explanation

A partially known environment is a type of penetration test where the tester has some information about the target, such as the IP address, the operating system, or the device type. This can help the tester focus on specific vulnerabilities and reduce the scope of the test. A partially known environment is also called a gray box test.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice