Exam CISM All QuestionsBrowse all questions from this exam
Go to Exam
Question 353

The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they:

    Correct Answer: C

    The primary advantage of performing black-box control tests as opposed to white-box control tests is that they simulate real-world attacks. Black-box testing is conducted without prior knowledge of the system's internal workings, thus mimicking the approach of an external attacker. This method provides a realistic assessment of the system's vulnerabilities and overall security posture, identifying potential weaknesses that might be overlooked when using insider knowledge, as in white-box testing.

Discussion
ZiggyboobooOption: C

Black box is no information shared, so C for me

AbheyOption: C

The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they simulate real-world attacks. Black-box testing is conducted with no prior knowledge of the system under test, simulating the perspective of an external attacker. This approach provides a realistic assessment of an organization's security posture and identifies vulnerabilities that might not be uncovered through other testing methods. In contrast, white-box testing is performed with full knowledge of the system's architecture, design, and source code, making it less realistic and less able to detect external threats.

baranikumar_vOption: C

C. They Simulate real-world scenarios.

aokisanOption: C

clearly, C.

EZPASSOption: C

C is the correct answer.

afb4b17Option: A

Look at this question from a management perspective. Black- box testing requires less efforts for preparation. Next to that it simulate real-world attacks.

Jess20Option: C

C. simulate real-world attacks

oluchecpointOption: C

C. simulate real-world attacks Black-box control tests simulate real-world attacks because they are conducted with limited knowledge of the internal workings of the system or application being tested. Testers approach the system as an external entity, similar to a potential attacker who doesn't have insider knowledge. This helps identify vulnerabilities and weaknesses that might be exploited by real attackers. White-box control tests, on the other hand, involve testing with knowledge of the internal structure and code of the system, which may not always reflect how a real-world attacker would interact with the system.

AgamennoreOption: C

I don’t understand why the system say different. In my opinion is C for sure

[Removed]Option: C

another vote for C

richck102Option: C

C. simulate real-world attacks

sedardnaOption: C

eS c sin duda