CompTIA Security+ (SY0-701) — Question 430

An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?

Answer options

• A. Partially known environment
• B. Unknown environment
• C. Integrated
• D. Known environment

Correct answer: A

Explanation

The correct answer is A, as the organization has shared basic information about the device, indicating some level of knowledge about the environment. An unknown environment would imply no prior information is available, while a known environment suggests comprehensive details are provided, which is not the case here. Integrated refers to a testing process that incorporates multiple components, which doesn't apply to this scenario.