QuestionQ48

Information Security Threats and Attacks

Tristan, a professional penetration tester, was hired by an organization to assess its network infrastructure. The organization wanted to understand its current security posture and how well it could defend against external threats. For this purpose, the organization gave Tristan no information about its IT infrastructure. Therefore, Tristan began zero-knowledge attacks, without information or assistance from the organization.

Which type of penetration testing has Tristan initiated in this scenario?

  • A Black-box testing
  • B White-box testing
  • C Gray-box testing
  • D Translucent-box testing
Explanation

Black-box penetration testing simulates an external attacker by giving the tester no prior knowledge of, or internal access to, the target environment. The zero-knowledge, no-assistance condition matches this testing type.

Community Discussion

No comments yet. Be the first to start the discussion!