A company has asked Pete, a penetration tester, to test their corporate network. Pete was provided with all of the server names, configurations, and corporate IP addresses. Pete was then instructed to stay off of the Accounting subnet as well as the company web server in the DMZ.
Pete was told that social engineering was not in the test scope as well. Which of the following BEST describes this penetration test?
A.
Gray box
B.
Black box
C.
White box
D.
Blue box
This is another question I just don’t understand – this looks like gray box to me. Pete only has some knowledge – not in depth knowledge of the coding. I must remember they want white box to be the answer though!