Examkin

Soru

Zorluk: OrtaVulnerability Assessment and Security Testing Methods

An enterprise hires a third-party security firm to audit its internal payment processing system. To maximize vulnerability discovery within a short two-week assessment window, the organization provides the auditors with complete network topology maps, source code repositories, and system configuration files prior to initiating testing. Which security testing methodology is being employed in this scenario?

  1. White-box testingCevap
  2. B
    Black-box testing
  3. C
    Gray-box testing
  4. D
    Deception-based testing

Cevap

White-box testing is being employed because the assessment team has been granted complete internal knowledge, including source code, system configuration files, and network diagrams.
White-box testing (also known as clear-box or structural testing) grants the assessment team complete knowledge of the system, including source code, internal design documentation, and configuration files. This enables deep vulnerability analysis and comprehensive code coverage within a restricted timeframe.

Adım Adım Çözüm

1
Analyze the information provided to the security assessment team
The team was given full architectural diagrams, source code access, host configurations, and network schematics.
Determining the level of internal knowledge granted defines the test methodology.
2
Map the level of visibility to standard security testing methodologies
Full internal visibility corresponds to white-box testing.
White-box testing allows complete structural transparency to assess vulnerabilities thoroughly within limited timelines.

Anahtar Kavram

Security Testing Methodologies (White-box vs. Gray-box vs. Black-box)
Bu soruyu puanla

Konular

Vulnerability Assessment and Security Testing Methods

Bu konudan daha fazla soru