CISM Exam QuestionsBrowse all questions from this exam

CISM Exam - Question 353


The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they:

Show Answer
Correct Answer: AC

The primary advantage of performing black-box control tests as opposed to white-box control tests is that they simulate real-world attacks. Black-box testing is conducted without prior knowledge of the system's internal workings, thus mimicking the approach of an external attacker. This method provides a realistic assessment of the system's vulnerabilities and overall security posture, identifying potential weaknesses that might be overlooked when using insider knowledge, as in white-box testing.

Discussion

12 comments
Sign in to comment
ZiggyboobooOption: C
Nov 10, 2022

Black box is no information shared, so C for me

EZPASSOption: C
Nov 14, 2022

C is the correct answer.

aokisanOption: C
Dec 15, 2022

clearly, C.

baranikumar_vOption: C
Jan 9, 2023

C. They Simulate real-world scenarios.

AbheyOption: C
May 2, 2023

The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they simulate real-world attacks. Black-box testing is conducted with no prior knowledge of the system under test, simulating the perspective of an external attacker. This approach provides a realistic assessment of an organization's security posture and identifies vulnerabilities that might not be uncovered through other testing methods. In contrast, white-box testing is performed with full knowledge of the system's architecture, design, and source code, making it less realistic and less able to detect external threats.

sedardnaOption: C
May 26, 2023

eS c sin duda

richck102Option: C
Jun 19, 2023

C. simulate real-world attacks

[Removed]Option: C
Jul 10, 2023

another vote for C

AgamennoreOption: C
Aug 27, 2023

I don’t understand why the system say different. In my opinion is C for sure

oluchecpointOption: C
Sep 6, 2023

C. simulate real-world attacks Black-box control tests simulate real-world attacks because they are conducted with limited knowledge of the internal workings of the system or application being tested. Testers approach the system as an external entity, similar to a potential attacker who doesn't have insider knowledge. This helps identify vulnerabilities and weaknesses that might be exploited by real attackers. White-box control tests, on the other hand, involve testing with knowledge of the internal structure and code of the system, which may not always reflect how a real-world attacker would interact with the system.

Jess20Option: C
Nov 26, 2023

C. simulate real-world attacks

afb4b17Option: A
Jun 9, 2024

Look at this question from a management perspective. Black- box testing requires less efforts for preparation. Next to that it simulate real-world attacks.