types of security penetration tests
To confirm that the applicable controls, such as scope, vulnerability management, methodology, and. segmentation, required in PCI DSS are in place. There are three types of penetration tests: black-box, white-box, and grey-box. In a black-box assessment, the client provides no information prior to the start of testing. In a white-box assessment, the entity may. provide the penetration tester with full and complete details of the network and applications.