Question

Which term refers to pen testing where testers start without knowledge of the system? Red box Black box Open box Closed box

Answer 1

Option (b) Black box

Step-by-step explanation:

• Penetration testing can be done in three approaches. They are

1. Black box approach
2. White box approach
3. Grey box approach

• Black box approach - In this kind of approach, the tester performs penetration testing on the application with very basic to no knowledge about the system internal workings.
• White box approach - In this kind of approach, the tester performs penetration testing on the application with the knowledge on the internal workings of the application and even with the access to the source codes.
• Grey box approach - This approach is a mix of both White box and Black box approach.
• So, option Black box is correct answer.
• There are no terms Red box , Open box and Closed box in penetration testing.
• So, options Red box, Open box and Closed box are wrong options.