How much information will Clive obtain from the client before commencing his test?

Clive has been hired to perform a Black-Box test by one of his clients.

How much information will Clive obtain from the client before commencing his test?
A . IP Range, OS, and patches installed.
B . Only the IP address range.
C . Nothing but corporate name.
D . All that is available from the client site.

View Answer

Answer: C

Explanation:

Penetration tests can be conducted in one of two ways: black-box (with no prior knowledge the infrastructure to be tested) or white-box (with complete knowledge of the infrastructure to be tested). As you might expect, there are conflicting opinions about this choice and the value that either approach will bring to a project.