연방 기관은 의무적인 연례 FISMA(연방 정보 보안 관리법) 보안 평가의 일환으로 중요한 시스템에 대한 침투 테스트를 수행할 감사자를 고용했습니다. 감사인은 이 시스템에 익숙하지 않지만 모든 유형의 침투 테스트에 대한 광범위한 경험을 가지고 있습니다. 감사자는 네트워크 트래픽 스니핑으로 시작하기로 결정했습니다. 감사인은 어떤 유형의 침투 테스트를 수행합니까?
정답: B
Black box testing is a type of penetration testing that simulates an attack from an external source with little or no prior knowledge of the target system. The tester relies on publicly available information, such as network scans, domain names, or email addresses, to discover and exploit the vulnerabilities of the system. Black box testing mimics the perspective and tactics of a real- world attacker, and evaluates the system's security posture, resilience, and exposure. Black box testing is often used to assess the security of web applications, network services, and wireless networks. Black box testing is different from white box testing, which simulates an attack from an internal source with full or partial knowledge of the target system. White box testing requires access to the system's source code, design documents, or configuration files, and evaluates the system's security architecture, logic, and functionality. White box testing is often used to assess the security of software code, databases, and APIs. Black box testing is also different from gray box testing, which simulates an attack from an external or internal source with limited knowledge of the target system. Gray box testing requires access to some information about the system, such as user credentials, network diagrams, or application interfaces, and evaluates the system's security controls, processes, and data flows. Gray box testing is often used to assess the security of web services, mobile applications, and cloud environments. Black box testing is also different from red box testing, which is not a type of penetration testing, but a term used to describe the testing of physical security devices, such as locks, alarms, or cameras, using specialized tools or techniques.
