Exam CISM topic 1 question 353 discussion

Look at this question from a management perspective. Black- box testing requires less efforts for preparation. Next to that it simulate real-world attacks.

C. simulate real-world attacks

C. simulate real-world attacks Black-box control tests simulate real-world attacks because they are conducted with limited knowledge of the internal workings of the system or application being tested. Testers approach the system as an external entity, similar to a potential attacker who doesn't have insider knowledge. This helps identify vulnerabilities and weaknesses that might be exploited by real attackers. White-box control tests, on the other hand, involve testing with knowledge of the internal structure and code of the system, which may not always reflect how a real-world attacker would interact with the system.

I don’t understand why the system say different. In my opinion is C for sure

another vote for C

C. simulate real-world attacks

eS c sin duda

The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they simulate real-world attacks. Black-box testing is conducted with no prior knowledge of the system under test, simulating the perspective of an external attacker. This approach provides a realistic assessment of an organization's security posture and identifies vulnerabilities that might not be uncovered through other testing methods. In contrast, white-box testing is performed with full knowledge of the system's architecture, design, and source code, making it less realistic and less able to detect external threats.

C. They Simulate real-world scenarios.

clearly, C.

C is the correct answer.

Black box is no information shared, so C for me