Question No : 10
A security assurance officer is preparing a plan to measure the technical state of a customer’s enterprise. The testers employed to perform the audit will be given access to the customer facility and network. The testers will not be given access to the details of custom developed software used by the customer. However the testers with have access to the source code for several open source applications and pieces of networking equipment used at the facility, but these items will not be within the scope of the audit.
Which of the following BEST describes the appropriate method of testing or technique to use in this scenario? (Select TWO)
A. Social engineering
B. All source
C. Black box
D. Memory dumping
E. Penetration
Answer: C,E
No comments:
Post a Comment
Note: only a member of this blog may post a comment.