An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?
Choose an answer
Tap an option to check your answer.
Correct answer: Partially known environment.
Why this is the answer
A partially known environment, also known as a gray-box test, is the best description because the penetration tester is given some limited information about the target system, such as basic device details. This simulates an attacker who has gained some initial access or performed reconnaissance. An unknown environment (black-box test) would involve no prior information, mimicking an external attacker with no internal knowledge. A known environment (white-box test) would provide full access to system architecture, source code, and configurations, which is not the case here. "Integrated" is not a standard term for describing the level of information provided in a penetration test.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed