Which term describes testing where the tester has full visibility into the application architecture and source code?

Which term describes testing where the tester has full visibility into the application architecture and source code?

• A. Static Application Security Testing (SAST)
• B. Web application Security Testing
• C. Whitebox testing
• D. Manual Web Application Security Testing

Answer: (C)

Having full visibility into the application's architecture and source code defines Whitebox testing. This approach, often called clear-box or glass-box testing, lets testers examine internal structures, logic paths, and data flows, enabling them to design tests that exercise specific code paths and security controls. It’s broader than static analysis (which inspects code without executing it) and not the same as general web application security testing or manual testing, which can be done without access to internals. So, the term that best describes testing with complete internal access is Whitebox testing.

Having full visibility into the application's architecture and source code defines Whitebox testing. This approach, often called clear-box or glass-box testing, lets testers examine internal structures, logic paths, and data flows, enabling them to design tests that exercise specific code paths and security controls. It’s broader than static analysis (which inspects code without executing it) and not the same as general web application security testing or manual testing, which can be done without access to internals. So, the term that best describes testing with complete internal access is Whitebox testing.