GSLC-2020: GIAC Security LeadershipDemo

Question

Which term describes the following statement?

> “It gives testers complete knowledge of the infrastructure being tested, often including network diagrams, source code, and IP-addressing information.”

A BackTrack
B GFI LANguard
C White box penetration testing
D Black box penetration testing

Explanation

White-box penetration testing is performed with explicit, substantial knowledge of the target’s internal structure and implementation. This can include extensive architectural information and source code, matching the stated access to network diagrams, source code, and IP-addressing details.

Learn more

NIST CSRC Glossary: White Box Testing

GSLC-2020: GIAC Security LeadershipDemo

AstroTutor

Notes

Readiness

QuestionQ220

Community Discussion