QuestionQ24

VerifiedSecure Software Testing

Under which testing methodology do assessors use all available documentation, work without constraints, and try to bypass an information system’s security features?

Explanation

A penetration test in which the assessment team is given full access to system documentation and operates without artificial constraints, actively attempting to circumvent the system's security controls, is the methodology used to realistically validate whether an information system's defenses can be bypassed by a determined, well-informed attacker.

Community Discussion

No comments yet. Be the first to start the discussion!