Certified Ethical Hacker (CEH) Practice Question

In ethical hacking, testing approaches are defined by how much information the assessor receives before starting. Black box testing assumes no prior knowledge, forcing the tester to discover everything from scratch. White box testing is the opposite-full knowledge is shared, including administrative credentials and source code. A double-blind test is a special form of black box in which neither the tester nor the organization's defenders know the exact timing or scope. Gray box testing falls between black and white box: the assessor is given limited, partial knowledge-often high-level architecture documents or user-level accounts-while still having to discover deeper details independently. Because the client supplies only a network diagram and user credentials, but withholds full administrative access and source code, this scenario aligns with gray box testing.