CISM Question 352

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Look at this question from a management perspective. Black- box testing requires less efforts for preparation. Next to that it simulate real-world attacks.

• Chose C2

  C. simulate real-world attacks

• 2

  C. simulate real-world attacks Black-box control tests simulate real-world attacks because they are conducted with limited knowledge of the internal workings of the system or application being tested. Testers approach the system as an external entity, similar to a potential attacker who doesn't have insider knowledge. This helps identify vulnerabilities and weaknesses that might be exploited by real attackers. White-box control tests, on the other hand, involve testing with knowledge of the internal structure and code of the system, which may not always reflect how a real-world attacker would interact with the system.