Exam PT0-001 topic 1 question 165 discussion

White Box surely.

looks good to me

Answer is B: Whitebox White-Box Penetration Testing The final category of testing is called white-box testing, which allows the security consultant to have complete open access to applications and systems. This allows consultants to view source code and be granted high-level privilege accounts to the network. The purpose of white-box testing is to identify potential weaknesses in various areas such as logical vulnerabilities, potential security exposures, security misconfigurations, poorly written development code, and lack-of-defensive measures. This type of assessment is more comprehensive, as both internal and external vulnerabilities are evaluated from a “behind the scenes” point of view that is not available to typical attackers. https://www.packetlabs.net/types-of-penetration-testing/

137. C. A white box test is sometimes referred to as a full knowledge assessment because the penetration testers have full knowledge of the client’s network, including administrative access to all infrastructure devices and servers. This type of assessment usually provides the most comprehensive results because the testers do not need to spend time in discovery mode. They have all the information they need to immediately begin an extensive assessment.

B. this was on the exam

Nope, it's A - white box

I would go with B on this one White box tests allow effective testing of systems without requiring testers to spend time identifying targets and determining which of them may allow a way in. This means that a white box test is often more complete, as testers can get to every system, service, or other target that is in scope and will have credentials and other materials that will allow them to be tested.

Comprehensive can mean most complicated and detailed pentest. A black box is comprehensive as it takes more time to complete while a white box is less comprehensive as you are only testing the code/application/equipment.

It's White Box. If you didn't get this question right go back and re-study again

The same link that is provided on the answer, clearly states its a White Box...

This answer is confusing. I have gone through some of reading and feels like White-box testing may be answer. https://resources.infosecinstitute.com/topic/what-are-black-box-grey-box-and-white-box-penetration-testing/ If anyone can confirm, it would be great.