Which type of network penetration attack model requires an attacker to have the highest skill level?
A. Black box
B. Gray box
C. White box
D. None of these are correct.
Answer:B
Which type of network penetration attack model requires an attacker to have the highest skill level?
A. Black box B. Gray box C. White box D. None of these are correct.
Explanation: The White Box Model of penetration testing treats the attacker as a trusted insider giving them considerable network knowledge and combining it with an advanced skill set. The parameters of the attack are designed by upper management and the White Box tester will report only to upper management. Gray box testing is a hybrid of White Box and Black Box methodology and its focus is determined by the client’s management team. Reporting will be specified in the attack plan. The Black Box attack will have less information about the network and the attacker will require a higher skill set by first gaining access to the target then finding and exploiting any vulnerabilities.