Multiple choice technology security

Scanning underlying source code with a database of regular expressions to quickly identify suspicious code, application inputs, outputs etc primarily relates to ..

  1. Grey-box testing

  2. Black-box testing

  3. White-box testing

  4. None of these
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

White-box testing involves analyzing source code directly to find vulnerabilities. Regex-based scanning is a static white-box technique that examines code patterns. Black-box (B) tests without code access, and grey-box (A) combines limited internal knowledge with external testing.

AI explanation

Scanning the actual source code with pattern/regex matching to spot suspicious constructs is a form of static analysis performed with full visibility into the code — that's the definition of white-box testing. Black-box testing probes the running application externally without seeing the code, and grey-box sits in between with partial knowledge, neither of which matches source-level regex scanning.

Keep practicing — related questions