Exam 312-50 topic 2 question 8 discussion

In a black-box testing assignment, the penetration tester is placed in the role of the average hacker, with no internal knowledge of the target system. Testers are not provided with any architecture diagrams or source code that is not publicly available. A black-box penetration test determines the vulnerabilities in a system that are exploitable from outside the network.

Black box scanning is a method of software security testing in which the security controls, defenses and design of an application are tested from the outside-in, with little or no prior knowledge of the application’s internal workings. It is typically used to test web applications and web services.

i confirm D the black box scan shoud be done without credential