Which testing approach is defined by testers not knowing the internal architecture of the system under test?

Which testing approach is defined by testers not knowing the internal architecture of the system under test?

• A. Dynamic Application Security Testing (DAST)
• B. White-box Testing
• C. Gray-box Testing
• D. Manual Penetration Testing

Answer: (A)

External testing without access to the system's internals is black-box testing. This approach treats the system as a black box and focuses on inputs, outputs, and observable behavior from an outside perspective, rather than reviewing source code or internal design. Dynamic Application Security Testing fits this description because it analyzes a live, running application from the outside, testing defenses without needing knowledge of the internal architecture. White-box testing uses full knowledge of internal structures, Gray-box testing uses partial knowledge, and manual penetration testing can vary in knowledge level, but the defining trait here is testing the running app from the outside, which aligns with DAST.

External testing without access to the system's internals is black-box testing. This approach treats the system as a black box and focuses on inputs, outputs, and observable behavior from an outside perspective, rather than reviewing source code or internal design. Dynamic Application Security Testing fits this description because it analyzes a live, running application from the outside, testing defenses without needing knowledge of the internal architecture. White-box testing uses full knowledge of internal structures, Gray-box testing uses partial knowledge, and manual penetration testing can vary in knowledge level, but the defining trait here is testing the running app from the outside, which aligns with DAST.