PT0-002 Engagement Management Practice Question
Which type of penetration test provides the tester with full knowledge of the target environment, including network diagrams, source code, and administrative credentials?
⚠ Common exam trap
PT0-003 often tests the distinction between knowledge levels (black/grey/white box) and engagement types (red team, purple team), so candidates who equate 'red team' with 'full knowledge' pick the wrong answer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
White box
A white box penetration test gives the tester full knowledge of the target, including network diagrams, source code, and administrative credentials. This full-disclosure approach lets the tester focus on finding vulnerabilities efficiently rather than spending time on reconnaissance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Grey box
Why it's wrong here
Grey box supplies partial knowledge, such as credentials or a single diagram, so testers still enumerate the remainder. The stem requires full disclosure of network diagrams, source code and administrative credentials, which defines white box testing.
- ✓
White box
Why this is correct
White box testing grants the assessor complete visibility — network diagrams, source code and administrative credentials — so effort focuses on finding flaws rather than reconnaissance. This contrasts with black box, where no internal knowledge is supplied, and grey box, which provides partial detail.
- ✗
Black box
Why it's wrong here
Black box testing supplies no internal information, so the tester must enumerate and discover the environment from scratch, directly contradicting the full disclosure described. It is tempting because black box mirrors an external attacker's perspective, which suits realism-focused assessments rather than the white box engagement the stem describes.
- ✗
Red team
Why it's wrong here
Red teaming tests detection and response through adversary simulation, not knowledge disclosure; testers typically operate covertly with limited or no environment data. Full-knowledge testing, where diagrams, source code and admin credentials are supplied upfront, defines white box testing.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PT0-003 question from scratch — 777 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.